Lucene search
+L

1 matches found

OSV
OSV
added 2026/02/09 6:4 p.m.11 views

CVE-2025-66630 Fiber insecurely fallsback in utils.UUIDv4() / utils.UUID() — predictable / zero‑UUID on crypto/rand failure

Fiber is an Express inspired web framework written in Go. Before 2.52.11, on Go versions prior to 1.24, the underlying crypto/rand implementation can return an error if secure randomness cannot be obtained. Because no error is returned by the Fiber v2 UUID functions, application code may...

9.2CVSS5.6AI score
SaveExploits0References5
Rows per page
Query Builder