Products: 3
    Vulnerabilities: 20
    Known Exploited: 0
    6
    Critical Level Threats
    6
    High Level Threats
    8
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-119285

    Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads

    Last Modified: Nov 04, 2026
    Published: Oct 29, 2026

    CVE-2026-44332

    Fiber: Username Enumeration via Timing Oracle in BasicAuth Default Authorizer

    Last Modified: Jul 09, 2026
    Published: Jul 08, 2026

    CVE-2026-53624

    Fiber: HSTS header never set in helmet middleware due to incorrect protocol check

    Last Modified: Jul 10, 2026
    Published: Jul 08, 2026

    CVE-2026-45045

    Fiber: X-Real-IP Spoofing via Header.Add() in BalancerForward

    Last Modified: Jul 09, 2026
    Published: Jul 08, 2026

    CVE-2026-42554

    Fiber: XSS in AutoFormat Content Negotiation

    Last Modified: May 18, 2026
    Published: May 11, 2026
    Items Per Page
    Gofiber Vulnerabilities & Security CVEs | CVE-DB