GO-2026-4471
NoneCVSS
—
EPSS
—
Published
Feb 19, 2026
CISA due date
—
The record
Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() on crypto/rand failure in github.com/gofiber/fiber
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/gofiber/fiber | 0 | No fix |
| Go | github.com/gofiber/fiber/v2 | 0 | 2.52.11 |
Related vulnerabilities
- CVE-2025-66630 Fiber is an Express inspired web framework written in Go. Same vulnerability
- GO-2026-4543 Fiber has a Denial of Service Vulnerability via Route Parameter Overflow in… Also affects github.com/gofiber/fiber/v2
- CVE-2026-25882 Fiber is an Express inspired web framework written in Go. Also affects github.com/gofiber/fiber/v2