logo

Database

Use of insecure channel - Source code In github.com/gofiber/fiber/v3

Description

GoFiber never set HSTS header in helmet middleware due to incorrect protocol check in github.com/gofiber/fiber

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2026-536242. NVD-2026-536243. OSV-2026-536244. OSV-GO-2026-59125. GHSA-gv83-gqw6-9j2c6. GCVE-2026-536247. GHSA-gv83-gqw6-9j2c

References

1. https://github.com/gofiber/fiber/security/advisories/GHSA-gv83-gqw6-9j2c2. https://github.com/gofiber/fiber/pull/4389

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.