Go/github.com/gofiber/fiber/v2 CVE-2023-45128: unknown, EPSS 0.36%

CSRF token reuse vulnerability in github.com/gofiber/fiber/v2

Action: Upgrade github.com/gofiber/fiber/v2 to 2.50.0 or later.

go get github.com/gofiber/fiber/v2@v2.50.0

Affected

Fixed versions

Sources

• osv: GO-2023-2115
• https://github.com/gofiber/fiber/security/advisories/GHSA-94w9-97p3-p368
• https://github.com/gofiber/fiber/commit/8c3916dbf4ad2ed427d02c6eb63ae8b2fa8f019a
• https://github.com/gofiber/fiber/commit/b50d91d58ecdff2a330bf07950244b6c4caf65b1

CVE-2023-45128 · published 2023-10-24T16:57:01Z · modified 2024-05-20T16:03:47Z · JSON