VDB
KO

GO-2026-5912

GoFiber never set HSTS header in helmet middleware due to incorrect protocol check in github.com/gofiber/fiber

Quick fix

GO-2026-5912 — github.com/gofiber/fiber/v3: upgrade to the fixed version with the command below.

go get github.com/gofiber/fiber/v3@v3.4.0

Details

GoFiber never set HSTS header in helmet middleware due to incorrect protocol check in github.com/gofiber/fiber

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/gofiber/fiber/v3
Introduced in: 0 Fixed in: 3.4.0
Fix go get github.com/gofiber/fiber/v3@v3.4.0

References