Lucene search
+L

44 matches found

OSV
OSV
โ€ขadded 2026/06/23 12:59 p.m.โ€ข15 views

JLSEC-2026-622 Predictable WebSocket masking key and handshake nonce in HTTP.jl client

Description The WebSocket client masking key wssendframe! and the Sec-WebSocket-Key handshake nonce wsrandomhandshakekey were generated with randUInt8, n, which draws from the task-local Xoshiro256++ PRNG. Xoshiro is not cryptographically secure: its internal state can be recovered from a short r...

5.9AI score
SaveExploits0References2
Rows per page
Query Builder