Fiber: Username Enumeration via Timing Oracle in BasicAuth Default Authorizer

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-44332 · Microsoft / collected KEV context

EUVD-2026-42358

GHSA-g5vh-55hw-rxm8

GO-2026-5886

cve-program · CVE-2026-44332

• https://github.com/gofiber/fiber/security/advisories/GHSA-g5vh-55hw-rxm8
• https://github.com/gofiber/fiber/pull/4245
• https://github.com/gofiber/fiber/commit/c7ac00edd19f9669b1aebbec6e229658baaa059e
• https://github.com/gofiber/fiber/releases/tag/v3.3.0

euvd · EUVD-2026-42358

• https://github.com/gofiber/fiber/security/advisories/GHSA-g5vh-55hw-rxm8
• https://github.com/gofiber/fiber/pull/4245
• https://github.com/gofiber/fiber/commit/c7ac00edd19f9669b1aebbec6e229658baaa059e
• https://github.com/gofiber/fiber/releases/tag/v3.3.0

nvd · CVE-2026-44332

• https://github.com/gofiber/fiber/commit/c7ac00edd19f9669b1aebbec6e229658baaa059e
• https://github.com/gofiber/fiber/pull/4245
• https://github.com/gofiber/fiber/releases/tag/v3.3.0
• https://github.com/gofiber/fiber/security/advisories/GHSA-g5vh-55hw-rxm8

osv · GHSA-g5vh-55hw-rxm8

• https://github.com/gofiber/fiber/security/advisories/GHSA-g5vh-55hw-rxm8
• https://github.com/gofiber/fiber

osv · GO-2026-5886

• https://github.com/gofiber/fiber/security/advisories/GHSA-g5vh-55hw-rxm8
• https://github.com/gofiber/fiber/pull/4245

No related operational record is retained in the current change model.