Lucene search
+L

1 matches found

OSV
OSV
added 2026/08/24 9:00 p.m.6 views

GHSA-W67G-5RQW-F597 Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key

gorilla/websocket used math/rand cryptographically weak pseudo-random number generator to generate WebSocket frame mask keys prior to commit d67f4185. WebSocket masking keys MUST be unpredictable to prevent frame content injection attacks. math/rand produces deterministic output when seeded with ...

6.9CVSS5.5AI score
SaveExploits0References4
Rows per page
Query Builder