Go/github.com/gorilla/websocket: medium
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key
Action: Upgrade github.com/gorilla/websocket to 1.5.3 or later.
go get github.com/gorilla/websocket@v1.5.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.3 | - |
Fixed versions
| 1.5.3 |
Sources
- osv: GHSA-w67g-5rqw-f597
- https://github.com/canolgun-commits/websocket/security/advisories/GHSA-w67g-5rqw-f597
- https://github.com/gorilla/websocket/commit/d67f41855da42d7bccd9ef050c49f7e54e783b95
- https://github.com/canolgun-commits/websocket
- https://github.com/gorilla/websocket/releases/tag/v1.5.3
published · modified · JSON