Go/github.com/gofiber/fiber/v2 CVE-2025-66630: critical 9.4, EPSS 0.53%
Fiber has an insecure fallback in utils.UUIDv4() / utils.UUID() on crypto/rand failure in github.com/gofiber/fiber
Action: Upgrade github.com/gofiber/fiber/v2 to 2.52.11 or later.
go get github.com/gofiber/fiber/v2@v2.52.11Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.52.11 | - |
Fixed versions
| 2.52.11 |
Sources
- osv: GO-2026-4471#Go/github.com/gofiber/fiber/v2
- nvd: CVE-2025-66630
- https://github.com/gofiber/fiber/security/advisories/GHSA-68rr-p4fp-j59v
- https://github.com/gofiber/fiber/commit/eb874b6f6c5896b968d9b0ab2b56ac7052cb0ee1
- https://github.com/gofiber/fiber/releases/tag/v2.52.11
CVE-2025-66630 · published · modified · JSON