Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket

概要

参考情報

• canolgun-commits/websocket security advisory · ADVISORY
• gorilla/websocket commit d67f418 · FIX
• gorilla/websocket release v1.5.3 · WEB

github.com/gorilla/websocket のその他の脆弱性

• GHSA-w67g-5rqw-f597中Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key
• CVE-2020-27813高 7.5An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this…