Critical UUID Flaw in Fiber v2 on Go 1.24+ Enables Session Hijacking, CSRF Bypass, and Zero-ID DoS Risk

A critical vulnerability (CVE-2025-66630) in Fiber v2 on Go (affecting versions < 2.52.11 running on Go 1.23 or earlier) causes UUID generation to silently fall back to the predictable zero UUID when the RNG fails, enabling session hijacking, CSRF bypass, authentication token guessing, and potential denial-of-service due to shared session keys; a patch (Fiber 2.52.11) is available and administrators are advised to upgrade and verify secure randomness sources.