| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/centrifugal/centrifugo | all versions | |
| github.com/centrifugal/centrifugo/v3 | all versions | |
| github.com/centrifugal/centrifugo/v4 | all versions | |
| github.com/centrifugal/centrifugo/v5 | all versions | |
| github.com/centrifugal/centrifugo/v6 | < 6.7.0 | 6.7.0 |
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free