CVE-2026-30246
2 advisories.
Go/github.com/gofiber/fiber/v3 CVE-2026-30246: medium 6.5
Fiber's cache middleware default key generator ignores query string, causing response mix-up across distinct query parameters
Action: Upgrade github.com/gofiber/fiber/v3 to 3.2.0 or later.
go get github.com/gofiber/fiber/v3@v3.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.0 | - |
Fixed versions
| 3.2.0 |
Sources
- osv: GHSA-35hp-hqmv-8qg8
- https://github.com/gofiber/fiber/security/advisories/GHSA-35hp-hqmv-8qg8
- https://nvd.nist.gov/vuln/detail/CVE-2026-30246
- https://github.com/gofiber/fiber/commit/050ff1ff18511c1475b8ec627460216aaecddd4e
- https://github.com/gofiber/fiber/commit/9a0d12c07ed895b84c72987f9288b04137afe5de
- https://github.com/gofiber/fiber
- https://github.com/gofiber/fiber/blob/main/middleware/cache/cache_test.go#L599-L621
- https://github.com/gofiber/fiber/blob/main/middleware/cache/config.go#L90-L92
CVE-2026-30246 · published · modified · JSON
Go/github.com/gofiber/fiber/v3 CVE-2026-30246: unknown
Fiber: Cache middleware key generator ignores query string in github.com/gofiber/fiber
Action: Upgrade github.com/gofiber/fiber/v3 to 3.2.0 or later.
go get github.com/gofiber/fiber/v3@v3.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.0 | - |
Fixed versions
| 3.2.0 |
Sources
- osv: GO-2026-5069
- https://github.com/gofiber/fiber/security/advisories/GHSA-35hp-hqmv-8qg8
- https://github.com/gofiber/fiber/commit/050ff1ff18511c1475b8ec627460216aaecddd4e
- https://github.com/gofiber/fiber/commit/9a0d12c07ed895b84c72987f9288b04137afe5de
CVE-2026-30246 · published · modified · JSON