MEDIUM5.3Go
GHSA-3q5p-3558-364f· CVE-2023-41338, GO-2023-2052Fiber unauthorized access vulnerability in `ctx.IsFromLocal()`
Modified: 9/10/2026
package
Go/github.com/gofiber/fiber
pkg:go/github.com/gofiber/fiber
CRITICAL10.0Go
GHSA-98j2-3j3p-fw2v· CVE-2024-38513, GO-2024-2959Session Middleware Token Injection Vulnerability
Modified: 9/10/2026
MEDIUM4.2Go
GHSA-9cx9-x2gp-9qvh· CVE-2020-15111, GO-2021-0108CRLF vulnerability in Fiber
Modified: 7/8/2026
MEDIUM4.8Go
GHSA-gv83-gqw6-9j2c· CVE-2026-53624, GO-2026-5912GoFiber never set HSTS header in helmet middleware due to incorrect protocol check
Modified: 7/24/2026
—Go
GO-2021-0108· CVE-2020-15111, GHSA-9cx9-x2gp-9qvhCRLF vulnerability in Fiber in github.com/gofiber/fiber
Modified: 5/20/2024
—Go
GO-2024-2959· CVE-2024-38513, GHSA-98j2-3j3p-fw2vSession Middleware Token Injection Vulnerability in github.com/gofiber/fiber
Modified: 3/3/2026
—Go
GO-2025-3706· CVE-2025-48075, GHSA-hg3g-gphw-5hhmFiber panics when fiber.Ctx.BodyParser parses invalid range index in github.com/gofiber/fiber
Modified: 2/4/2026
—Go
GO-2026-4471· CVE-2025-66630, GHSA-68rr-p4fp-j59vFiber has an insecure fallback in utils.UUIDv4() / utils.UUID() on crypto/rand failure in github.com/gofiber/fiber
Modified: 2/19/2026