SUSE CVE-2026-32301

Centrifugo is an open-source scalable real-time messaging server. Prior to 6.7.0, Centrifugo is vulnerable to Server-Side Request Forgery SSRF when configured with a dynamic JWKS endpoint URL using template variables e.g. tenant. An unauthenticated attacker can craft a JWT with a malicious iss or...

CVE-2026-32301

creationtimestamp| type| source ---|---|--- 2026-03-12 20:34:16+00:00| published-proof-of-concept| https://github.com/centrifugal/centrifugo/security/advisories/GHSA-j77h-rr39-c552 2026-03-12 22:41:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgvhu5jil72k 2026-03-13...