3 matches found
GHSA-HG3G-GPHW-5HHM Fiber panics when fiber.Ctx.BodyParser parses invalid range index
Summary When using the fiber.Ctx.BodyParser to parse into a struct with range values, a panic occurs when trying to parse a negative range index Details fiber.Ctx.BodyParser can map flat data to nested slices using keyidxvalue syntax, however when idx is negative, it causes a panic instead of...
CVE-2025-48075
Fiber is an Express-inspired web framework written in Go. Starting in version 2.52.6 and prior to version 2.52.7, "fiber.Ctx.BodyParser" can map flat data to nested slices using "keyidxvalue" syntax, but when idx is negative, it causes a panic instead of returning an error stating it cannot proce...
CVE-2025-48075: Improper Validation of Array Index
Fiber is an Express-inspired web framework written in Go. Starting in version 2.52.6 and prior to version 2.52.7, fiber.Ctx.BodyParser can map flat data to nested slices using keyidxvalue syntax, but when idx is negative, it causes a panic instead of returning an error stating it cannot process t...