GO-2026-5585
Fiber vulnerable to XSS in AutoFormat Content Negotiation in github.com/gofiber/fiber
At a glance
- Published
- Updated
- CVE
- CVE-2026-42554
- Aliases
- GHSA-qjv7-627w-8qjv
Description
Fiber vulnerable to XSS in AutoFormat Content Negotiation in github.com/gofiber/fiber
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/gofiber/fiber/v2 | introduced 0, fixed 2.52.13 |
| Go · github.com/gofiber/fiber/v3 | introduced 0, fixed 3.2.0 |
References
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |