Vulnerability GO-2026-6896
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
9 hours ago
November 05, 2026 at 10:55 PM UTC
Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads in github.com/gofiber/fiber
>=2.52.1 <2.52.3
>=2.52.1 <2.52.3
Summary
Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads in github.com/gofiber/fiber
Details
Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads in github.com/gofiber/fiber
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
6 days ago
Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads
>=2.52.1 <2.52.3 GHSA-g5jq-qmqr-qrwf
>=2.52.1 <2.52.3 GHSA-g5jq-qmqr-qrwf
Unknown
3 months ago
Fiber vulnerable to XSS in AutoFormat Content Negotiation in github.com/gofiber/fiber
<2.52.13 GO-2026-5585
<2.52.13 GO-2026-5585
Medium Risk
4 months ago
GoFiber Vulnerable to X-Real-IP Spoofing via Header.Add() in BalancerForward
<2.52.14 GHSA-gcfq-8gqf-4876
<2.52.14 GHSA-gcfq-8gqf-4876
Medium Risk
6 months ago
Fiber vulnerable to XSS in AutoFormat Content Negotiation
<2.52.13 GHSA-qjv7-627w-8qjv
<2.52.13 GHSA-qjv7-627w-8qjv
Unknown
8 months ago
Fiber has a Denial of Service Vulnerability via Route Parameter Overflow in github.com/gofiber/fiber
<2.52.12 GO-2026-4543
<2.52.12 GO-2026-4543
Impacted packages
Timeline
Published
9 hours ago
November 05, 2026 at 10:55 PM UTC
Fixed (v2.52.3)
2 years ago
March 25, 2024 at 07:26 PM UTC
Last Modified
8 hours ago
November 05, 2026 at 11:15 PM UTC