{"schema_version":1,"title":"Gofiber vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 6 vulnerabilities in Gofiber: 0 in the last 7 days and 1 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-119285, was published on 29 October 2026. 1 vulnerability in the last four weeks, up from none in the four before.","url":"https://junglewise.ai/threats/vendors/gofiber","json_url":"https://junglewise.ai/threats/vendors/gofiber.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/gofiber","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":0,"all_time":6,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":1,"last_90_days":1,"last_365_days":6},"latest":[{"cve":"CVE-2026-119285","cvss":5.9,"epss":0.0013,"slug":"cve-2026-119285-fiber-is-an-express-inspired-web-framework-written-in-go-from-2","title":"Fiber CORS middleware wildcard domain bypass","severity":"medium","exploited":false,"published_at":"2026-10-29T22:17:01.367+00:00","url":"https://junglewise.ai/threats/cve-2026-119285-fiber-is-an-express-inspired-web-framework-written-in-go-from-2"},{"cve":"CVE-2026-53624","cvss":4.8,"epss":0.0021,"slug":"cve-2026-53624-gofiber-fiber-hsts-header-omission-in-helmet-middleware","title":"Gofiber Fiber HSTS header omission in helmet middleware","severity":"medium","exploited":false,"published_at":"2026-07-08T20:16:52.293+00:00","url":"https://junglewise.ai/threats/cve-2026-53624-gofiber-fiber-hsts-header-omission-in-helmet-middleware"},{"cve":"CVE-2026-45045","cvss":5.3,"epss":0.0046,"slug":"cve-2026-45045-gofiber-fiber-ip-spoofing-in-balancerforward-proxy-helper","title":"Gofiber Fiber IP spoofing in BalancerForward proxy helper","severity":"medium","exploited":false,"published_at":"2026-07-08T20:16:50.06+00:00","url":"https://junglewise.ai/threats/cve-2026-45045-gofiber-fiber-ip-spoofing-in-balancerforward-proxy-helper"},{"cve":"CVE-2026-44332","cvss":5.3,"epss":0.0052,"slug":"cve-2026-44332-gofiber-fiber-username-enumeration-in-basicauth-middleware","title":"Gofiber Fiber username enumeration in BasicAuth middleware","severity":"medium","exploited":false,"published_at":"2026-07-08T20:16:49.773+00:00","url":"https://junglewise.ai/threats/cve-2026-44332-gofiber-fiber-username-enumeration-in-basicauth-middleware"},{"cve":"CVE-2026-42554","cvss":4,"epss":0.0031,"slug":"cve-2026-42554-go-fiber-xss-in-autoformat-content-negotiation","title":"Go Fiber XSS in AutoFormat content negotiation","severity":"medium","exploited":false,"published_at":"2026-05-11T23:19:48.083+00:00","url":"https://junglewise.ai/threats/cve-2026-42554-go-fiber-xss-in-autoformat-content-negotiation"},{"cve":"CVE-2026-30246","cvss":6.5,"epss":0.0037,"slug":"cve-2026-30246-gofiber-fiber-response-mix-up-in-cache-middleware","title":"Gofiber Fiber response mix-up in cache middleware","severity":"medium","exploited":false,"published_at":"2026-05-05T13:16:28.82+00:00","url":"https://junglewise.ai/threats/cve-2026-30246-gofiber-fiber-response-mix-up-in-cache-middleware"}],"vendor":{"hub":true,"name":"Gofiber","slug":"gofiber","description":"Go web framework for building high-performance HTTP applications.","url":"https://junglewise.ai/threats/vendors/gofiber"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-30246","cvss":6.5,"epss":0.0037,"slug":"cve-2026-30246-gofiber-fiber-response-mix-up-in-cache-middleware","title":"Gofiber Fiber response mix-up in cache middleware","severity":"medium","exploited":false,"published_at":"2026-05-05T13:16:28.82+00:00","url":"https://junglewise.ai/threats/cve-2026-30246-gofiber-fiber-response-mix-up-in-cache-middleware"},{"cve":"CVE-2026-119285","cvss":5.9,"epss":0.0013,"slug":"cve-2026-119285-fiber-is-an-express-inspired-web-framework-written-in-go-from-2","title":"Fiber CORS middleware wildcard domain bypass","severity":"medium","exploited":false,"published_at":"2026-10-29T22:17:01.367+00:00","url":"https://junglewise.ai/threats/cve-2026-119285-fiber-is-an-express-inspired-web-framework-written-in-go-from-2"},{"cve":"CVE-2026-44332","cvss":5.3,"epss":0.0052,"slug":"cve-2026-44332-gofiber-fiber-username-enumeration-in-basicauth-middleware","title":"Gofiber Fiber username enumeration in BasicAuth middleware","severity":"medium","exploited":false,"published_at":"2026-07-08T20:16:49.773+00:00","url":"https://junglewise.ai/threats/cve-2026-44332-gofiber-fiber-username-enumeration-in-basicauth-middleware"},{"cve":"CVE-2026-45045","cvss":5.3,"epss":0.0046,"slug":"cve-2026-45045-gofiber-fiber-ip-spoofing-in-balancerforward-proxy-helper","title":"Gofiber Fiber IP spoofing in BalancerForward proxy helper","severity":"medium","exploited":false,"published_at":"2026-07-08T20:16:50.06+00:00","url":"https://junglewise.ai/threats/cve-2026-45045-gofiber-fiber-ip-spoofing-in-balancerforward-proxy-helper"},{"cve":"CVE-2026-53624","cvss":4.8,"epss":0.0021,"slug":"cve-2026-53624-gofiber-fiber-hsts-header-omission-in-helmet-middleware","title":"Gofiber Fiber HSTS header omission in helmet middleware","severity":"medium","exploited":false,"published_at":"2026-07-08T20:16:52.293+00:00","url":"https://junglewise.ai/threats/cve-2026-53624-gofiber-fiber-hsts-header-omission-in-helmet-middleware"},{"cve":"CVE-2026-42554","cvss":4,"epss":0.0031,"slug":"cve-2026-42554-go-fiber-xss-in-autoformat-content-negotiation","title":"Go Fiber XSS in AutoFormat content negotiation","severity":"medium","exploited":false,"published_at":"2026-05-11T23:19:48.083+00:00","url":"https://junglewise.ai/threats/cve-2026-42554-go-fiber-xss-in-autoformat-content-negotiation"}],"generated_at":"2026-11-09T03:07:00.176479+00:00","technologies":[]}