Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket

Description

References

• canolgun-commits/websocket security advisory · ADVISORY
• gorilla/websocket commit d67f418 · FIX
• gorilla/websocket release v1.5.3 · WEB

github.com/gorilla/websocket 的其他漏洞

• GHSA-w67g-5rqw-f597中危Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key
• CVE-2020-27813高危 7.5An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this…