Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket

Mô tả

Tham khảo

• canolgun-commits/websocket security advisory · ADVISORY
• gorilla/websocket commit d67f418 · FIX
• gorilla/websocket release v1.5.3 · WEB

Lỗ hổng khác của github.com/gorilla/websocket

• GHSA-w67g-5rqw-f597TRUNG BÌNHGorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key
• CVE-2020-27813CAO 7.5An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this…