Skip to content
OpenAdvisories
High DLA-2520-1 1 CVE

golang-websocket - security update

Published Jan 7, 2021 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 9 golang-websocket 1.1.0-1+deb9u1

Vulnerabilities 1

  • High 7.5

    Integer overflow in github.com/gorilla/websocket

    An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections.