https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T09:08:26.583691+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-48075 CVE-2025-48075 — Fiber panics when fiber.Ctx.BodyParser parses invalid range index 2026-10-07T09:08:26.599081+00:00

Affected: gofiber fiber

Fiber is an Express-inspired web framework written in Go. Starting in version 2.52.6 and prior to version 2.52.7, `fiber.Ctx.BodyParser` can map flat data to nested slices using `key[idx]value` syntax, but when idx is negative, it causes a panic instead of returning an error stating it cannot process the data. Since this data is user-provided, this could lead to denial of service for anyone relying on this `fiber.Ctx.BodyParser` functionality. Version 2.52.7 fixes the issue.