Vulnerability GO-2026-4543
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
8 months ago
February 26, 2026 at 04:27 PM UTC
Fiber has a Denial of Service Vulnerability via Route Parameter Overflow in github.com/gofiber/fiber
v2.0.0 - v2.52.11
v2.0.0 - v2.52.11
Summary
Fiber has a Denial of Service Vulnerability via Route Parameter Overflow in github.com/gofiber/fiber
Details
Fiber has a Denial of Service Vulnerability via Route Parameter Overflow in github.com/gofiber/fiber
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
6 hours ago
Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads
v2.52.1 - v2.52.2 GHSA-g5jq-qmqr-qrwf
v2.52.1 - v2.52.2 GHSA-g5jq-qmqr-qrwf
Unknown
3 months ago
Fiber: Cache middleware key generator ignores query string in github.com/gofiber/fiber
v3.0.0-beta.2 - v3.1.0 GO-2026-5069
v3.0.0-beta.2 - v3.1.0 GO-2026-5069
Unknown
3 months ago
Fiber vulnerable to XSS in AutoFormat Content Negotiation in github.com/gofiber/fiber
v3.0.0-beta.2 - v3.1.0 GO-2026-5585
v3.0.0-beta.2 - v3.1.0 GO-2026-5585
Unknown
3 months ago
Fiber vulnerable to XSS in AutoFormat Content Negotiation in github.com/gofiber/fiber
v3.0.0-beta.2 - v3.1.0 GO-2026-5585
v3.0.0-beta.2 - v3.1.0 GO-2026-5585
Unknown
3 months ago
GoFiber Vulnerable to Username Enumeration via Timing Oracle in BasicAuth Default Authorizer in github.com/gofiber/fiber
v3.0.0-beta.2 - v3.2.0 GO-2026-5886
v3.0.0-beta.2 - v3.2.0 GO-2026-5886
Impacted packages
Timeline
Published
8 months ago
February 26, 2026 at 04:27 PM UTC
Fixed (v3.1.0)
8 months ago
February 24, 2026 at 08:12 PM UTC
Fixed (v2.52.12)
8 months ago
February 24, 2026 at 08:37 PM UTC
Last Modified
8 months ago
February 26, 2026 at 07:11 PM UTC