DirectorySecurity AdvisoriesPricing
/
Sign in
Security Advisories

CVE-2025-48075

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-48075

Severity

Unknown

Summary

Fiber panics when fiber.Ctx.BodyParser parses invalid range index

Description

Fiber is an Express-inspired web framework written in Go. Starting in version 2.52.6 and prior to version 2.52.7, fiber.Ctx.BodyParser can map flat data to nested slices using key[idx]value syntax, but when idx is negative, it causes a panic instead of returning an error stating it cannot process the data. Since this data is user-provided, this could lead to denial of service for anyone relying on this fiber.Ctx.BodyParser functionality. Version 2.52.7 fixes the issue.

References

Affected packages


The trusted source for open source

Talk to an expert
© 2025 Chainguard. All Rights Reserved.
PrivacyTerms

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing