Lucene search
+L

23 matches found

Github Security Blog
Github Security Blog
added 2026/07/06 8:43 p.m.9 views

GoFiber never set HSTS header in helmet middleware due to incorrect protocol check

Summary The helmet middleware in gofiber/fiber never sets the Strict-Transport-Security HSTS response header, even when HSTSMaxAge is explicitly configured, because the condition check at helmet.go:67 uses c.Protocol — which returns the HTTP protocol version string e.g., "HTTP/1.1", "HTTP/2.0" —...

4.8CVSS5.9AI score0.00178EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder