Skip to content
OpenAdvisories

Package · Go

github.com/gorilla/websocket

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-w67g-5rqw-f597

    Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key

    gorilla/websocket used `math/rand` (cryptographically weak pseudo-random number generator) to generate WebSocket frame mask keys prior to commit d67f4185. WebSocket masking keys MUST be unpredictable to prevent frame content injection attacks. math/rand produ…

    github.com/gorilla/websocket Go