An open index of dependabot pull requests across open source projects.

github.com/gofiber/fiber/v2

Ecosystem:
go
Package URL:
pkg:golang/github.com/gofiber/fiber/v2
Total PRs:
1,182 Dependabot PRs
Latest PR:
3 days ago
Unique Repositories:
673 repositories
Unique Repos (30 days):
20 repositories
Security Advisories
Go Fiber CSRF Token Validation Vulnerability
GHSA-mv73-f69x-444p CVE-2023-45141 HIGH published over 2 years ago • updated 14 days ago
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the application, which allows an attacker to obtain tokens and forge malic...
github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error
GHSA-927h-x4qj-r242 CVE-2018-20744 MODERATE published almost 4 years ago • updated 10 days ago
The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which ...
Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure
GHSA-68rr-p4fp-j59v CVE-2025-66630 CRITICAL published about 1 month ago • updated 16 days ago
Fiber v2 contains an internal vendored copy of `gofiber/utils`, and its functions `UUIDv4()` and `UUID()` inherit the same critical weakness descri...
CSRF Token Reuse Vulnerability
GHSA-94w9-97p3-p368 CVE-2023-45128 CRITICAL published over 2 years ago • updated 12 days ago
A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the application, which allows an attacker to inject arbitrary values and f...
Fiber panics when fiber.Ctx.BodyParser parses invalid range index
GHSA-hg3g-gphw-5hhm CVE-2025-48075 HIGH published 10 months ago • updated 18 days ago
### Summary When using the `fiber.Ctx.BodyParser` to parse into a struct with range values, a panic occurs when trying to parse a negative range in...
Recent PRs
Package Details
Name: github.com/gofiber/fiber/v2
Ecosystem: go
PURL Type: golang
Package URL: pkg:golang/github.com/gofiber/fiber/v2
JSON API: View JSON
Security Advisories

9

Active advisories
CRITICAL 4
HIGH 3
MODERATE 2
View All golang Advisories
Package Information
Description:

Package fiber is an Express inspired web framework built on top of Fasthttp, the fastest HTTP engine for Go. Designed to ease things up for fast development with zero memory allocation and performance in mind.

Repository: https://github.com/gofiber/fiber
Homepage: https://github.com/gofiber/fiber
Latest Release: v2.52.8
10 months ago
Dependent Repos: 5,223
Dependent Packages: 5,791
Ranking: Top 0.1159% by dependent repos Top 0.0508% by dependent pkgs
PR Status
Open 539 (45.6%)
Merged 275 (23.3%)
Closed 277 (23.4%)
PR Types
Minor 70 (5.9%)
Patch 1,021 (86.4%)