Go/github.com/gofiber/fiber/v3 CVE-2026-42554: medium 6.1, EPSS 0.21%
Fiber vulnerable to XSS in AutoFormat Content Negotiation
Action: Upgrade github.com/gofiber/fiber/v3 to 3.2.0 or later.
go get github.com/gofiber/fiber/v3@v3.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.0 | - |
Fixed versions
| 3.2.0 |
Sources
- osv: GHSA-qjv7-627w-8qjv
- nvd: CVE-2026-42554
- https://github.com/gofiber/fiber/security/advisories/GHSA-qjv7-627w-8qjv
- https://github.com/gofiber/fiber
CVE-2026-42554 · published · modified · JSON