GHSA-35hp-hqmv-8qg8Published
Fiber's cache middleware default key generator ignores query string, causing response mix-up across distinct query parameters
Exact source revision recorded 24 Oct 2026 13:19:41 UTC. It does not establish the source's current position. Latest evidence.
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-30246 · Microsoft / collected KEV context
osv · GHSA-35hp-hqmv-8qg8
- https://github.com/gofiber/fiber/security/advisories/GHSA-35hp-hqmv-8qg8
- https://nvd.nist.gov/vuln/detail/CVE-2026-30246
- https://github.com/gofiber/fiber/commit/050ff1ff18511c1475b8ec627460216aaecddd4e
- https://github.com/gofiber/fiber/commit/9a0d12c07ed895b84c72987f9288b04137afe5de
- https://github.com/gofiber/fiber
- https://github.com/gofiber/fiber/blob/main/middleware/cache/cache_test.go#L599-L621
- https://github.com/gofiber/fiber/blob/main/middleware/cache/config.go#L90-L92
Current operational correlations are not mixed into this historical source record. Open latest evidence to discover current connections.