Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket

Description

References

• canolgun-commits/websocket security advisory · ADVISORY
• gorilla/websocket commit d67f418 · FIX
• gorilla/websocket release v1.5.3 · WEB

Más vulnerabilidades de github.com/gorilla/websocket

• GHSA-w67g-5rqw-f597MEDIOGorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key
• CVE-2020-27813ALTO 7.5An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this…