GO-2026-4471
Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() on crypto/rand failure in github.com/gofiber/fiber
At a glance
- Published
- Updated
- CVE
- CVE-2025-66630
- Aliases
- GHSA-68rr-p4fp-j59v
Description
Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure in github.com/gofiber/fiber
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/gofiber/fiber | introduced 0 |
| Go · github.com/gofiber/fiber/v2 | introduced 0, fixed 2.52.11 |
References
- https://github.com/gofiber/fiber/security/advisories/GHSA-68rr-p4fp-j59v ADVISORY
- https://github.com/gofiber/fiber/commit/eb874b6f6c5896b968d9b0ab2b56ac7052cb0ee1 FIX
- https://github.com/gofiber/fiber/releases/tag/v2.52.11 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |