CVE-2026-119285

The Fiber web framework (Go) versions 2.52.1 through 2.52.3 are vulnerable to a CORS misconfiguration in the middleware/cors/utils.go component. The validateDomain wildcard matcher improperly strips the scheme and checks only the host suffix without requiring a dot boundary . Consequently, applic...