tocsin

Go/github.com/gofiber/fiber/v2 CVE-2026-42554: unknown, EPSS 0.31%

Fiber vulnerable to XSS in AutoFormat Content Negotiation in github.com/gofiber/fiber

Action: Upgrade github.com/gofiber/fiber/v2 to 2.52.13 or later.

go get github.com/gofiber/fiber/v2@v2.52.13

Affected

introducedfixedlast affected
02.52.13-

Fixed versions

2.52.13

Sources

CVE-2026-42554 · published · modified · JSON