Security Intel Hub 8+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Filter

KEV only

Verified PoC

High

Go Static Middleware Path Traversal & Windows UNC Vector Fix

github.com · 2026-02-25

go fiber < latest patch for PR #4064

High

GoFiber v3 Flash Cookie Unrestricted Memory Allocation DoS (CVE-2026-25899)

CVE-2026-25899 · github.com · 2026-02-25

github.com/gofiber/fiber/v3 <= v3.0.0

High

CVE-2026-25891: Arbitrary File Read in Fiber Static Middleware

CVE-2026-25891 · github.com · 2026-02-25

Fiber <= 3.0.0

Low

Go Fiber Router Parameter Overflow DoS Vulnerability

github.com · 2026-02-25

github.com/gofiber/fiber/v2 <= 2.52.11 · github.com/gofiber/fiber/v3 <= 3.0.0

Critical

Fiber v2 UUID Predictable on crypto/rand Failure (CVE-2025-66630)

CVE-2025-66630 · github.com · 2026-02-10

github.com/gofiber/fiber/v2 < v2.52.11

Critical

CVE-2025-96565: gofiber/utils Predictable UUIDs on crypto/rand Failure

CVE-2025-96565 · github.com · 2025-12-10

github.com/gofiber/utils <= 1.2.0 · github.com/gofiber/utils/v2 <= v2.0.0-rc.3

CVE-2025-54801: Go Fiber BodyParser Out-of-Bounds Slice Allocation DoS

github.com · 2025-08-07

### Key Information #### Vulnerability Overview - **Vulnerability Name**: Crash in `BodyParser` Due to Unvalidated Large Slice Index in Decoder - **CVE ID**: CVE-2025-54801 - **GHSA ID**: GHSA-qx2q-88…

Go Fiber CVE-2025-48075 BodyParser DoS via Negative Index Panic

github.com · 2025-05-24

### Critical Vulnerability Information #### Vulnerability Overview - **CVE ID**: CVE-2025-48075 - **Severity**: High - **Affected Versions**: >=v2.52.6 - **Fixed Version**: v2.52.7 #### Vulnerability …

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.