Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/gofiber/fiber/v3

go

Package fiber is an Express inspired web framework built on top of Fasthttp, the fastest HTTP engine for Go.

View on github.com · View on proxy.golang.org

Security Advisories for github.com/gofiber/fiber/v3 in go

Moderate
about 2 months ago

GoFiber Vulnerable to X-Real-IP Spoofing via Header.Add() in BalancerForward GSA_kwCzR0hTQS1nY2ZxLThncWYtNDg3Ns4ABaDh

go github.com/gofiber/fiber/v3
Moderate
about 2 months ago

GoFiber Vulnerable to Username Enumeration via Timing Oracle in BasicAuth Default Authorizer GSA_kwCzR0hTQS1nNXZoLTU1aHctcnhtOM4ABaDg

go github.com/gofiber/fiber/v3
Moderate
3 months ago

Fiber vulnerable to XSS in AutoFormat Content Negotiation GSA_kwCzR0hTQS1xanY3LTYyN3ctOHFqds4ABWM3

go github.com/gofiber/fiber/v2, github.com/gofiber/fiber/v3
Moderate
4 months ago

Fiber's cache middleware default key generator ignores query string, causing response mix-up across distinct query parameters GSA_kwCzR0hTQS0zNWhwLWhxbXYtOHFnOM4ABV4e

go github.com/gofiber/fiber/v3
Moderate
6 months ago

Fiber has a Denial of Service Vulnerability via Route Parameter Overflow GSA_kwCzR0hTQS1tcnE4LXJqbXctd3BxM84ABSzB

go github.com/gofiber/fiber/v3, github.com/gofiber/fiber/v2
High
6 months ago

Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation GSA_kwCzR0hTQS0ybXIzLW01cTUtd2dwNs4ABSzA

go github.com/gofiber/fiber/v3
High
6 months ago

Fiber has an Arbitrary File Read in Static Middleware on Windows GSA_kwCzR0hTQS1tM2MyLTQ5NnYtY3czds4ABSy_

go github.com/gofiber/fiber/v3

Filter by Severity

Moderate 5 High 2