Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo

Description

References

• centrifugal/centrifugo security advisory · ADVISORY
• centrifugal/centrifugo release v6.6.1 · WEB

github.com/centrifugal/centrifugo의 다른 취약점

• CVE-2026-71485심각 9.1Centrifugo is an open-source scalable real-time messaging server. Prior to 6.9.0, Centrifugo copies the client-controlled protocol.ConnectRe…
• CVE-2026-49998높음 8.2Centrifugo is an open-source scalable real-time messaging server. Prior to 6.8.1, Centrifugo dynamic JWKS endpoint verification could reuse …
• GO-2026-4703Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo
• GHSA-q926-c743-49qj낮음 0.0Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning
• CVE-2026-32301심각 9.3Centrifugo is an open-source scalable real-time messaging server. Prior to 6.7.0, Centrifugo is vulnerable to Server-Side Request Forgery (S…