github.com/gofiber/fiber/v2

Follow this package

Get the evidence behind this dependency. Browse imported advisories below, or check an exact version against OSV now. View source coverage.

Check the version you ship.

Get a fresh OSV lookup for an exact release. We send the package name and version to OSV without storing a report.

Advisories & recorded fixes

medium5.9

CVE-2026-119285Fix available

Fiber: CORS wildcard origins matched without a dot boundary, allowing credentialed cross-origin reads

Go / github.com/gofiber/fiber/v2

1 day ago

github.com/gofiber/fiber/v2 Go

Affected range	Recorded fix
From 2.52.1 before 2.52.3Semantic versions	2.52.3

Version evidence: OSV · GHSA-g5jq-qmqr-qrwf

View original version evidence

{
  "ranges": [
    {
      "events": [
        {
          "introduced": "2.52.1"
        },
        {
          "fixed": "2.52.3"
        }
      ],
      "type": "SEMVER"
    }
  ],
  "versions": []
}