Go/github.com/gofiber/fiber/v2 CVE-2025-48075: high 7.5, EPSS 0.53%
Fiber panics when fiber.Ctx.BodyParser parses invalid range index
Action: Upgrade github.com/gofiber/fiber/v2 to 2.52.7 or later.
go get github.com/gofiber/fiber/v2@v2.52.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.52.6 | 2.52.7 | - |
Fixed versions
| 2.52.7 |
Sources
- osv: GHSA-hg3g-gphw-5hhm
- nvd: CVE-2025-48075
- https://github.com/gofiber/fiber/security/advisories/GHSA-hg3g-gphw-5hhm
- https://github.com/gofiber/fiber/commit/e115c08b8f059a4a031b492aa9eef0712411853d
- https://github.com/gofiber/fiber
- https://pkg.go.dev/vuln/GO-2025-3706
CVE-2025-48075 · published · modified · JSON