GO-2026-4540

vendorUSosv

Fiber has an Arbitrary File Read in Static Middleware on Windows in github.com/gofiber/fiber/v3

view advisory published 2026-02-26Licence: per source

Fiber has an Arbitrary File Read in Static Middleware on Windows in github.com/gofiber/fiber/v3

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-25891UShigh7.5—
Fiber is an Express inspired web framework written in Go. A Path Traversal (CWE-22) vulnerability in Fiber allows a remote attacker to bypass the static middleware sanitizer and re…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan