[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-30246":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":31,"aliases":41,"duplicate_of":9,"upstream":44,"downstream":45,"duplicates":52,"related":53,"reserved_at":9,"published_at":57,"modified_at":58,"state":59,"summary":60,"references_raw":68,"kevs":108,"epss":109,"epss_history":112,"metrics":382,"affected":392},"CVE-2026-30246","Fiber is a web framework for Go. In github.com/gofiber/fiber/v3 versions through 3.1.0, the default key generator in the cache middleware uses only the request path and does not include the query string. As a result, requests for the same path with different query parameters can share a cache key and receive the wrong cached response. This can cause response mix-up for query-dependent endpoints and may expose data intended for a different request. This issue is fixed after version 3.1.0.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-436","Interpretation Conflict","Product A handles inputs or steps differently than Product B, which causes A to perform incorrect actions based on its perception of B's state.","weakness","Incomplete","Class",[19,23,27],{"id":20,"name":21,"techniques":22},"CAPEC-105","HTTP Request Splitting",[],{"id":24,"name":25,"techniques":26},"CAPEC-273","HTTP Response Smuggling",[],{"id":28,"name":29,"techniques":30},"CAPEC-34","HTTP Response Splitting",[],[32],{"_key":33,"name":34,"source":35,"url":36,"maturity":37,"reliability_score":38,"verified":39,"type":9,"platforms":40,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_GOFIBER_FIBER","Fiber","github","https://github.com/gofiber/fiber/security/advisories/GHSA-fmg4-x8pw-hjhg","poc",0.3,false,[],[42,43],"GHSA-35hp-hqmv-8qg8","GO-2026-5069",[],[46,48,50],{"_key":47},"OPENSUSE-SU-2026:21551-1",{"_key":49},"SUSE-SU-2026:23216-1",{"_key":51},"SUSE-SU-2026:23227-1",[],[54,55,56],{"_key":47},{"_key":49},{"_key":51},"2026-05-05T12:40:19.813Z","2026-05-05T15:04:02.984Z","Analyzed",{"cisa_kev":39,"cisa_ransomware":39,"cisa_vendor":9,"epss_severity":61,"epss_score":62,"severity":63,"severity_score":64,"severity_version":65,"severity_source":66,"severity_vector":67,"severity_status":59},"low",0.00251,"medium",6.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",[69,80,86,90,95,99,104],{"url":70,"sources":71,"tags":74},"https://github.com/gofiber/fiber/security/advisories/GHSA-35hp-hqmv-8qg8",[66,72,73],"nvd","osv_go",[75,76,77,78,79],"X Refsource CONFIRM","WEB","Exploit","Vendor Advisory","Advisory",{"url":81,"sources":82,"tags":83},"https://github.com/gofiber/fiber/blob/main/middleware/cache/cache_test.go#L599-L621",[66,72,73],[84,76,85],"X Refsource MISC","Product",{"url":87,"sources":88,"tags":89},"https://github.com/gofiber/fiber/blob/main/middleware/cache/config.go#L90-L92",[66,72,73],[84,76,85],{"url":91,"sources":92,"tags":93},"https://github.com/gofiber/fiber/commit/050ff1ff18511c1475b8ec627460216aaecddd4e",[73],[76,94],"FIX",{"url":96,"sources":97,"tags":98},"https://github.com/gofiber/fiber/commit/9a0d12c07ed895b84c72987f9288b04137afe5de",[73],[76,94],{"url":100,"sources":101,"tags":102},"https://github.com/gofiber/fiber",[73],[103],"PACKAGE",{"url":105,"sources":106,"tags":107},"https://nvd.nist.gov/vuln/detail/CVE-2026-30246",[73],[79],[],{"date":110,"score":62,"percentile":111},"2026-09-19",0.1685,[113,117,120,123,126,129,133,136,140,143,146,149,152,155,158,161,164,167,170,173,176,179,182,185,188,191,194,197,200,203,206,209,213,216,219,222,225,228,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,276,279,282,285,288,291,294,297,300,303,305,308,311,313,316,319,322,325,328,331,334,337,340,343,346,349,352,354,357,360,363,366,369,372,374,377,380],{"date":114,"score":115,"percentile":116},"2026-05-06",0.00027,0.07636,{"date":118,"score":115,"percentile":119},"2026-05-07",0.07756,{"date":121,"score":115,"percentile":122},"2026-05-08",0.07777,{"date":124,"score":115,"percentile":125},"2026-05-09",0.07827,{"date":127,"score":115,"percentile":128},"2026-05-10",0.07833,{"date":130,"score":131,"percentile":132},"2026-05-11",0.00036,0.10661,{"date":134,"score":131,"percentile":135},"2026-05-12",0.10704,{"date":137,"score":138,"percentile":139},"2026-05-13",0.00037,0.11064,{"date":141,"score":138,"percentile":142},"2026-05-14",0.11096,{"date":144,"score":138,"percentile":145},"2026-05-15",0.11097,{"date":147,"score":138,"percentile":148},"2026-05-16",0.11132,{"date":150,"score":138,"percentile":151},"2026-05-17",0.11111,{"date":153,"score":138,"percentile":154},"2026-05-18",0.11061,{"date":156,"score":138,"percentile":157},"2026-05-19",0.11024,{"date":159,"score":138,"percentile":160},"2026-05-20",0.11018,{"date":162,"score":138,"percentile":163},"2026-05-21",0.11,{"date":165,"score":138,"percentile":166},"2026-05-22",0.11208,{"date":168,"score":138,"percentile":169},"2026-05-23",0.11198,{"date":171,"score":138,"percentile":172},"2026-05-24",0.11195,{"date":174,"score":138,"percentile":175},"2026-05-25",0.1117,{"date":177,"score":138,"percentile":178},"2026-05-26",0.11156,{"date":180,"score":138,"percentile":181},"2026-05-27",0.11244,{"date":183,"score":138,"percentile":184},"2026-05-28",0.11373,{"date":186,"score":138,"percentile":187},"2026-05-29",0.11428,{"date":189,"score":138,"percentile":190},"2026-05-30",0.11407,{"date":192,"score":138,"percentile":193},"2026-05-31",0.11381,{"date":195,"score":138,"percentile":196},"2026-06-01",0.11364,{"date":198,"score":138,"percentile":199},"2026-06-02",0.11356,{"date":201,"score":138,"percentile":202},"2026-06-03",0.11325,{"date":204,"score":138,"percentile":205},"2026-06-04",0.11342,{"date":207,"score":138,"percentile":208},"2026-06-05",0.11431,{"date":210,"score":211,"percentile":212},"2026-06-06",0.0004,0.12562,{"date":214,"score":211,"percentile":215},"2026-06-07",0.12526,{"date":217,"score":211,"percentile":218},"2026-06-08",0.12444,{"date":220,"score":211,"percentile":221},"2026-06-09",0.1247,{"date":223,"score":211,"percentile":224},"2026-06-10",0.12516,{"date":226,"score":211,"percentile":227},"2026-06-11",0.12552,{"date":229,"score":211,"percentile":230},"2026-06-12",0.12644,{"date":232,"score":211,"percentile":233},"2026-06-13",0.12651,{"date":235,"score":211,"percentile":236},"2026-06-14",0.12631,{"date":238,"score":62,"percentile":239},"2026-06-15",0.16155,{"date":241,"score":62,"percentile":242},"2026-06-16",0.16177,{"date":244,"score":62,"percentile":245},"2026-06-17",0.1618,{"date":247,"score":62,"percentile":248},"2026-06-18",0.16196,{"date":250,"score":62,"percentile":251},"2026-06-19",0.16185,{"date":253,"score":62,"percentile":254},"2026-06-20",0.16172,{"date":256,"score":62,"percentile":257},"2026-06-21",0.16163,{"date":259,"score":62,"percentile":260},"2026-06-22",0.16145,{"date":262,"score":62,"percentile":263},"2026-06-23",0.16183,{"date":265,"score":62,"percentile":266},"2026-06-24",0.16206,{"date":268,"score":62,"percentile":269},"2026-06-25",0.16303,{"date":271,"score":62,"percentile":272},"2026-06-26",0.16329,{"date":274,"score":62,"percentile":275},"2026-06-27",0.16366,{"date":277,"score":62,"percentile":278},"2026-06-28",0.1633,{"date":280,"score":62,"percentile":281},"2026-06-29",0.16326,{"date":283,"score":62,"percentile":284},"2026-06-30",0.16321,{"date":286,"score":62,"percentile":287},"2026-07-01",0.16409,{"date":289,"score":62,"percentile":290},"2026-07-02",0.16351,{"date":292,"score":62,"percentile":293},"2026-07-03",0.16355,{"date":295,"score":62,"percentile":296},"2026-07-04",0.16363,{"date":298,"score":62,"percentile":299},"2026-07-05",0.16367,{"date":301,"score":62,"percentile":302},"2026-07-06",0.16372,{"date":304,"score":62,"percentile":275},"2026-07-07",{"date":306,"score":62,"percentile":307},"2026-07-08",0.16333,{"date":309,"score":62,"percentile":310},"2026-07-09",0.16349,{"date":312,"score":62,"percentile":296},"2026-07-10",{"date":314,"score":62,"percentile":315},"2026-07-11",0.16379,{"date":317,"score":62,"percentile":318},"2026-07-12",0.16362,{"date":320,"score":62,"percentile":321},"2026-07-13",0.16358,{"date":323,"score":62,"percentile":324},"2026-07-14",0.1639,{"date":326,"score":62,"percentile":327},"2026-07-15",0.16406,{"date":329,"score":62,"percentile":330},"2026-07-16",0.16427,{"date":332,"score":62,"percentile":333},"2026-07-17",0.16438,{"date":335,"score":62,"percentile":336},"2026-07-18",0.16446,{"date":338,"score":62,"percentile":339},"2026-07-19",0.16449,{"date":341,"score":62,"percentile":342},"2026-07-20",0.16551,{"date":344,"score":62,"percentile":345},"2026-07-21",0.16545,{"date":347,"score":62,"percentile":348},"2026-07-22",0.16606,{"date":350,"score":62,"percentile":351},"2026-07-23",0.16587,{"date":353,"score":62,"percentile":351},"2026-07-24",{"date":355,"score":62,"percentile":356},"2026-07-25",0.16612,{"date":358,"score":62,"percentile":359},"2026-07-26",0.16602,{"date":361,"score":62,"percentile":362},"2026-07-27",0.16565,{"date":364,"score":62,"percentile":365},"2026-07-28",0.16622,{"date":367,"score":62,"percentile":368},"2026-07-29",0.16611,{"date":370,"score":62,"percentile":371},"2026-07-30",0.16619,{"date":373,"score":62,"percentile":365},"2026-07-31",{"date":375,"score":62,"percentile":376},"2026-08-01",0.16616,{"date":378,"score":62,"percentile":379},"2026-08-02",0.1661,{"date":381,"score":62,"percentile":376},"2026-08-03",[383,388,390],{"source":66,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":384,"cvss_v4_0":9},{"baseScore":64,"baseSeverity":385,"vectorString":67,"impactScore":386,"exploitabilityScore":387},"MEDIUM",4.2,10,{"source":72,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":389,"cvss_v4_0":9},{"baseScore":64,"baseSeverity":385,"vectorString":67,"impactScore":386,"exploitabilityScore":387},{"source":73,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":391,"cvss_v4_0":9},{"baseScore":64,"baseSeverity":9,"vectorString":67,"impactScore":386,"exploitabilityScore":387},[393,408],{"ecosystem":9,"name":394,"vendor":395,"product":394,"cpe_part":396,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":397},"fiber","gofiber","a",[398,405],{"version":399,"is_range":400,"range_type":66,"version_start":401,"version_start_type":402,"version_end":403,"version_end_type":404,"fixed_in":9},">= v3.0.0-beta.2, \u003C 3.1.0",true,"v3.0.0-beta.2","including","3.1.0","excluding",{"version":406,"is_range":400,"range_type":407,"version_start":9,"version_start_type":9,"version_end":403,"version_end_type":402,"fixed_in":9},"lte3.1.0","cpe",{"ecosystem":409,"name":410,"vendor":411,"product":412,"cpe_part":9,"purl_type":413,"purl_namespace":411,"purl_name":412,"source":9,"versions":414},"Go","github.com/gofiber/fiber/v3","github.com/gofiber/fiber","v3","golang",[415],{"version":416,"is_range":400,"range_type":417,"version_start":9,"version_start_type":9,"version_end":418,"version_end_type":404,"fixed_in":9},"lt3_2_0","semver","3.2.0"]