Ecosyste.ms: OpenCollective

An open API service for software projects hosted on Open Collective.

github.com/gofiber/fiber

⚡️ Express inspired web framework written in Go
https://github.com/gofiber/fiber

Critical

GSA_kwCzR0hTQS05OGoyLTNqM3AtZncyds4AA9cs

Session Middleware Token Injection Vulnerability
Ecosystems: go
Packages: github.com/gofiber/fiber/v2/middleware/session, github.com/gofiber/fiber/v2, github.com/gofiber/fiber
Source: github
Published: 6 months ago

Critical

GSA_kwCzR0hTQS1mbWc0LXg4cHctaGpoZ84AA5dK

Fiber has Insecure CORS Configuration, Allowing Wildcard Origin with Credentials
Ecosystems: go
Packages: github.com/gofiber/fiber/v2
Source: github
Published: 10 months ago

High

GSA_kwCzR0hTQS1tdjczLWY2OXgtNDQ0cM4AA2gQ

Go Fiber CSRF Token Validation Vulnerability
Ecosystems: go
Packages: github.com/gofiber/fiber/v2
Source: github
Published: about 1 year ago

Critical

GSA_kwCzR0hTQS05NHc5LTk3cDMtcDM2OM4AA2gP

CSRF Token Reuse Vulnerability
Ecosystems: go
Packages: github.com/gofiber/fiber/v2
Source: github
Published: about 1 year ago

Moderate

GSA_kwCzR0hTQS0zcTVwLTM1NTgtMzY0Zs4AA1xI

Fiber unauthorized access vulnerability in `ctx.IsFromLocal()`
Ecosystems: go
Packages: github.com/gofiber/fiber/v2, github.com/gofiber/fiber
Source: github
Published: over 1 year ago

Moderate

MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTljeDkteDJncC05cXZo

CRLF vulnerability in Fiber
Ecosystems: go
Packages: github.com/gofiber/fiber
Source: github
Published: over 3 years ago