github.com/gofiber/fiber/v2 vulnerabilities
CVEs whose affected-version data names the github.com/gofiber/fiber/v2 package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-45045Medium· 5.3GoFiber Vulnerable to X-Real-IP Spoofing via Header.Add() in BalancerForward
GoFiber Vulnerable to X-Real-IP Spoofing via Header.Add() in BalancerForward
▾ Sunlitgofiber · github.com/gofiber/fiber/v3EPSS 0.46%via GHSA
CVE-2026-42554MediumFiber vulnerable to XSS in AutoFormat Content Negotiation
Fiber vulnerable to XSS in AutoFormat Content Negotiation
▾ Sunlitgofiber · github.com/gofiber/fiber/v3EPSS 0.21%via OSV
CVE-2025-66630CriticalFiber has an insecure fallback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure
Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure
▾ Midnightgofiber · github.com/gofiber/fiber/v2EPSS 0.49%via OSV
CVE-2023-41338Medium· 5.3Fiber unauthorized access vulnerability in `ctx.IsFromLocal()`
Fiber unauthorized access vulnerability in `ctx.IsFromLocal()`
▾ Sunlitgofiber · github.com/gofiber/fiberEPSS 0.66%via OSV