CVE-2025-66565: utils through 1.2.0 (inclusive), 2.0.0 · update beta1, 2.0.0 · update beta10 (+17 more affected versions)

Affected technology

utils · through 1.2.0 (inclusive)
gofiber

utils · 2.0.0 · update beta1
gofiber

utils · 2.0.0 · update beta10
gofiber

utils · 2.0.0 · update beta11
gofiber

utils · 2.0.0 · update beta12
gofiber

utils · 2.0.0 · update beta13
gofiber

utils · 2.0.0 · update beta14
gofiber

utils · 2.0.0 · update beta2
gofiber

utils · 2.0.0 · update beta3
gofiber

utils · 2.0.0 · update beta4
gofiber

utils · 2.0.0 · update beta5
gofiber

utils · 2.0.0 · update beta6
gofiber

utils · 2.0.0 · update beta7
gofiber

utils · 2.0.0 · update beta8
gofiber

utils · 2.0.0 · update beta9
gofiber

utils · 2.0.0 · update rc1
gofiber

utils · 2.0.0 · update rc2
gofiber

utils · 2.0.0 · update rc3
gofiber

utils · 2.0.0 · update rc4
gofiber

utils · github.com/gofiber/utils <= 1.2.0, github.com/gofiber/utils/v2 < 2.0.0-rc.4
gofiber

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Vendor/CNA’s CVSS 4.0 assessment (base score 9.3/10) rates confidentiality and integrity impact as high; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.