Go/github.com/gofiber/fiber CVE-2025-66630: critical 9.4, EPSS 0.53%
Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() on crypto/rand failure in github.com/gofiber/fiber
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-4471
- nvd: CVE-2025-66630
- https://github.com/gofiber/fiber/security/advisories/GHSA-68rr-p4fp-j59v
- https://github.com/gofiber/fiber/commit/eb874b6f6c5896b968d9b0ab2b56ac7052cb0ee1
- https://github.com/gofiber/fiber/releases/tag/v2.52.11
CVE-2025-66630 · published · modified · JSON