Go/github.com/gofiber/fiber/v2 CVE-2025-66630: critical, EPSS 0.53%
Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure
Action: Upgrade github.com/gofiber/fiber/v2 to 2.52.11 or later.
go get github.com/gofiber/fiber/v2@v2.52.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.52.11 | - |
Fixed versions
| 2.52.11 |
Sources
- osv: GHSA-68rr-p4fp-j59v
- https://github.com/gofiber/fiber/security/advisories/GHSA-68rr-p4fp-j59v
- https://nvd.nist.gov/vuln/detail/CVE-2025-66630
- https://github.com/gofiber/fiber/commit/eb874b6f6c5896b968d9b0ab2b56ac7052cb0ee1
- https://github.com/gofiber/fiber
- https://github.com/gofiber/fiber/releases/tag/v2.52.11
CVE-2025-66630 · published · modified · JSON