Fiber: HSTS header never set in helmet middleware due to incorrect protocol check

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-53624 · Microsoft / collected KEV context

EUVD-2026-42356

GHSA-gv83-gqw6-9j2c

GO-2026-5912

cve-program · CVE-2026-53624

• https://github.com/gofiber/fiber/security/advisories/GHSA-gv83-gqw6-9j2c
• https://github.com/gofiber/fiber/pull/4389
• https://github.com/gofiber/fiber/commit/04dd4e7754f61768fddccacc79057e416f13e6bf
• https://github.com/gofiber/fiber/releases/tag/v3.4.0

euvd · EUVD-2026-42356

• https://github.com/gofiber/fiber/security/advisories/GHSA-gv83-gqw6-9j2c
• https://github.com/gofiber/fiber/pull/4389
• https://github.com/gofiber/fiber/commit/04dd4e7754f61768fddccacc79057e416f13e6bf
• https://github.com/gofiber/fiber/releases/tag/v3.4.0

nvd · CVE-2026-53624

• https://github.com/gofiber/fiber/commit/04dd4e7754f61768fddccacc79057e416f13e6bf
• https://github.com/gofiber/fiber/pull/4389
• https://github.com/gofiber/fiber/releases/tag/v3.4.0
• https://github.com/gofiber/fiber/security/advisories/GHSA-gv83-gqw6-9j2c

osv · GHSA-gv83-gqw6-9j2c

• https://github.com/gofiber/fiber/security/advisories/GHSA-gv83-gqw6-9j2c
• https://github.com/gofiber/fiber

osv · GO-2026-5912

• https://github.com/gofiber/fiber/security/advisories/GHSA-gv83-gqw6-9j2c
• https://github.com/gofiber/fiber/pull/4389

No related operational record is retained in the current change model.