gofiber fiber vulnerabilities

Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads

gofiber · fiber

Fiber: Username Enumeration via Timing Oracle in BasicAuth Default Authorizer

gofiber · fiber

Fiber: HSTS header never set in helmet middleware due to incorrect protocol check

gofiber · fiber

Fiber: X-Real-IP Spoofing via Header.Add() in BalancerForward

gofiber · fiber

Fiber: XSS in AutoFormat Content Negotiation

gofiber · fiber

github.com/gofiber/fiber/v3 cache middleware can mix responses across query parameters

gofiber · fiber

Fiber is Vulnerable to Denial of Service via Flash Cookie Unbounded Allocation

gofiber · fiber

Fiber has an Arbitrary File Read in Static Middleware on Windows

gofiber · fiber

Fiber has a Denial of Service Vulnerability via Route Parameter Overflow

gofiber · fiber

Fiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure

gofiber · fiber