CVE-2023-26154

npm/pubnub CVE-2023-26154: medium 5.9, EPSS 0.96%

pubnub Insufficient Entropy vulnerability

Action: Upgrade pubnub to 7.4.0 or later.

npm i pubnub@7.4.0

Affected

Fixed versions

Sources

• osv: GHSA-5844-q3fc-56rh
• https://nvd.nist.gov/vuln/detail/CVE-2023-26154
• https://github.com/pubnub/go/commit/428517fef5b901db7275d9f5a75eda89a4c28e08
• https://github.com/pubnub/javascript/commit/fb6cd0417cbb4ba87ea2d5d86a9c94774447e119
• https://security.snyk.io/vuln/SNYK-UNMANAGED-PUBNUBCCORE-6098379
• https://security.snyk.io/vuln/SNYK-SWIFT-PUBNUBSWIFT-6098381
• https://security.snyk.io/vuln/SNYK-RUST-PUBNUB-6098378
• https://security.snyk.io/vuln/SNYK-RUBY-PUBNUB-6098377
• https://security.snyk.io/vuln/SNYK-PYTHON-PUBNUB-6098375
• https://security.snyk.io/vuln/SNYK-PUB-PUBNUB-6098385
• https://security.snyk.io/vuln/SNYK-PHP-PUBNUBPUBNUB-6098376
• https://security.snyk.io/vuln/SNYK-JS-PUBNUB-5840690
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098380
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098371
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGOV7-6098374
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGO-6098373
• https://security.snyk.io/vuln/SNYK-DOTNET-PUBNUB-6098372
• https://security.snyk.io/vuln/SNYK-COCOAPODS-PUBNUB-6098384
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pubnub/CVE-2023-26154.yml
• https://github.com/pubnub/javascript/blob/master/src/crypto/modules/web.js#L70
• https://github.com/pubnub/javascript
• https://github.com/advisories/GHSA-5844-q3fc-56rh
• https://gist.github.com/vargad/20237094fce7a0a28f0723d7ce395bb0

CVE-2023-26154 · published 2023-12-06T06:30:20Z · modified 2026-07-07T17:56:14.430840384Z · JSON

Go/github.com/pubnub/go/v7 CVE-2023-26154: medium 5.9, EPSS 0.96%

pubnub Insufficient Entropy vulnerability

Action: Upgrade github.com/pubnub/go/v7 to 7.2.0 or later.

go get github.com/pubnub/go/v7@v7.2.0

Affected

Fixed versions

Sources

• osv: GHSA-5844-q3fc-56rh#Go/github.com/pubnub/go/v7
• https://nvd.nist.gov/vuln/detail/CVE-2023-26154
• https://github.com/pubnub/go/commit/428517fef5b901db7275d9f5a75eda89a4c28e08
• https://github.com/pubnub/javascript/commit/fb6cd0417cbb4ba87ea2d5d86a9c94774447e119
• https://security.snyk.io/vuln/SNYK-UNMANAGED-PUBNUBCCORE-6098379
• https://security.snyk.io/vuln/SNYK-SWIFT-PUBNUBSWIFT-6098381
• https://security.snyk.io/vuln/SNYK-RUST-PUBNUB-6098378
• https://security.snyk.io/vuln/SNYK-RUBY-PUBNUB-6098377
• https://security.snyk.io/vuln/SNYK-PYTHON-PUBNUB-6098375
• https://security.snyk.io/vuln/SNYK-PUB-PUBNUB-6098385
• https://security.snyk.io/vuln/SNYK-PHP-PUBNUBPUBNUB-6098376
• https://security.snyk.io/vuln/SNYK-JS-PUBNUB-5840690
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098380
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098371
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGOV7-6098374
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGO-6098373
• https://security.snyk.io/vuln/SNYK-DOTNET-PUBNUB-6098372
• https://security.snyk.io/vuln/SNYK-COCOAPODS-PUBNUB-6098384
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pubnub/CVE-2023-26154.yml
• https://github.com/pubnub/javascript/blob/master/src/crypto/modules/web.js#L70
• https://github.com/pubnub/javascript
• https://github.com/advisories/GHSA-5844-q3fc-56rh
• https://gist.github.com/vargad/20237094fce7a0a28f0723d7ce395bb0

CVE-2023-26154 · published 2023-12-06T06:30:20Z · modified 2026-07-07T17:56:14.430840384Z · JSON

Go/github.com/pubnub/go CVE-2023-26154: medium 5.9, EPSS 0.96%

pubnub Insufficient Entropy vulnerability

Action: Upgrade github.com/pubnub/go to 0.0.0-20231016150651-428517fef5b9 or later.

go get github.com/pubnub/go@v0.0.0-20231016150651-428517fef5b9

Affected

Fixed versions

Sources

• osv: GHSA-5844-q3fc-56rh#Go/github.com/pubnub/go
• https://nvd.nist.gov/vuln/detail/CVE-2023-26154
• https://github.com/pubnub/go/commit/428517fef5b901db7275d9f5a75eda89a4c28e08
• https://github.com/pubnub/javascript/commit/fb6cd0417cbb4ba87ea2d5d86a9c94774447e119
• https://security.snyk.io/vuln/SNYK-UNMANAGED-PUBNUBCCORE-6098379
• https://security.snyk.io/vuln/SNYK-SWIFT-PUBNUBSWIFT-6098381
• https://security.snyk.io/vuln/SNYK-RUST-PUBNUB-6098378
• https://security.snyk.io/vuln/SNYK-RUBY-PUBNUB-6098377
• https://security.snyk.io/vuln/SNYK-PYTHON-PUBNUB-6098375
• https://security.snyk.io/vuln/SNYK-PUB-PUBNUB-6098385
• https://security.snyk.io/vuln/SNYK-PHP-PUBNUBPUBNUB-6098376
• https://security.snyk.io/vuln/SNYK-JS-PUBNUB-5840690
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098380
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098371
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGOV7-6098374
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGO-6098373
• https://security.snyk.io/vuln/SNYK-DOTNET-PUBNUB-6098372
• https://security.snyk.io/vuln/SNYK-COCOAPODS-PUBNUB-6098384
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pubnub/CVE-2023-26154.yml
• https://github.com/pubnub/javascript/blob/master/src/crypto/modules/web.js#L70
• https://github.com/pubnub/javascript
• https://github.com/advisories/GHSA-5844-q3fc-56rh
• https://gist.github.com/vargad/20237094fce7a0a28f0723d7ce395bb0

CVE-2023-26154 · published 2023-12-06T06:30:20Z · modified 2026-07-07T17:56:14.430840384Z · JSON

Go/github.com/pubnub/go/v6 CVE-2023-26154: medium 5.9, EPSS 0.96%

pubnub Insufficient Entropy vulnerability

Action: Upgrade github.com/pubnub/go/v6 to 6.1.1-0.20231016150651-428517fef5b9 or later.

go get github.com/pubnub/go/v6@v6.1.1-0.20231016150651-428517fef5b9

Affected

Fixed versions

Sources

• osv: GHSA-5844-q3fc-56rh#Go/github.com/pubnub/go/v6
• https://nvd.nist.gov/vuln/detail/CVE-2023-26154
• https://github.com/pubnub/go/commit/428517fef5b901db7275d9f5a75eda89a4c28e08
• https://github.com/pubnub/javascript/commit/fb6cd0417cbb4ba87ea2d5d86a9c94774447e119
• https://security.snyk.io/vuln/SNYK-UNMANAGED-PUBNUBCCORE-6098379
• https://security.snyk.io/vuln/SNYK-SWIFT-PUBNUBSWIFT-6098381
• https://security.snyk.io/vuln/SNYK-RUST-PUBNUB-6098378
• https://security.snyk.io/vuln/SNYK-RUBY-PUBNUB-6098377
• https://security.snyk.io/vuln/SNYK-PYTHON-PUBNUB-6098375
• https://security.snyk.io/vuln/SNYK-PUB-PUBNUB-6098385
• https://security.snyk.io/vuln/SNYK-PHP-PUBNUBPUBNUB-6098376
• https://security.snyk.io/vuln/SNYK-JS-PUBNUB-5840690
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098380
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098371
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGOV7-6098374
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGO-6098373
• https://security.snyk.io/vuln/SNYK-DOTNET-PUBNUB-6098372
• https://security.snyk.io/vuln/SNYK-COCOAPODS-PUBNUB-6098384
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pubnub/CVE-2023-26154.yml
• https://github.com/pubnub/javascript/blob/master/src/crypto/modules/web.js#L70
• https://github.com/pubnub/javascript
• https://github.com/advisories/GHSA-5844-q3fc-56rh
• https://gist.github.com/vargad/20237094fce7a0a28f0723d7ce395bb0

CVE-2023-26154 · published 2023-12-06T06:30:20Z · modified 2026-07-07T17:56:14.430840384Z · JSON

Go/github.com/pubnub/go/v5 CVE-2023-26154: medium 5.9, EPSS 0.96%

pubnub Insufficient Entropy vulnerability

Action: Upgrade github.com/pubnub/go/v5 to 5.0.4-0.20231016150651-428517fef5b9 or later.

go get github.com/pubnub/go/v5@v5.0.4-0.20231016150651-428517fef5b9

Affected

Fixed versions

Sources

• osv: GHSA-5844-q3fc-56rh#Go/github.com/pubnub/go/v5
• https://nvd.nist.gov/vuln/detail/CVE-2023-26154
• https://github.com/pubnub/go/commit/428517fef5b901db7275d9f5a75eda89a4c28e08
• https://github.com/pubnub/javascript/commit/fb6cd0417cbb4ba87ea2d5d86a9c94774447e119
• https://security.snyk.io/vuln/SNYK-UNMANAGED-PUBNUBCCORE-6098379
• https://security.snyk.io/vuln/SNYK-SWIFT-PUBNUBSWIFT-6098381
• https://security.snyk.io/vuln/SNYK-RUST-PUBNUB-6098378
• https://security.snyk.io/vuln/SNYK-RUBY-PUBNUB-6098377
• https://security.snyk.io/vuln/SNYK-PYTHON-PUBNUB-6098375
• https://security.snyk.io/vuln/SNYK-PUB-PUBNUB-6098385
• https://security.snyk.io/vuln/SNYK-PHP-PUBNUBPUBNUB-6098376
• https://security.snyk.io/vuln/SNYK-JS-PUBNUB-5840690
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098380
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098371
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGOV7-6098374
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGO-6098373
• https://security.snyk.io/vuln/SNYK-DOTNET-PUBNUB-6098372
• https://security.snyk.io/vuln/SNYK-COCOAPODS-PUBNUB-6098384
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pubnub/CVE-2023-26154.yml
• https://github.com/pubnub/javascript/blob/master/src/crypto/modules/web.js#L70
• https://github.com/pubnub/javascript
• https://github.com/advisories/GHSA-5844-q3fc-56rh
• https://gist.github.com/vargad/20237094fce7a0a28f0723d7ce395bb0

CVE-2023-26154 · published 2023-12-06T06:30:20Z · modified 2026-07-07T17:56:14.430840384Z · JSON

RubyGems/pubnub CVE-2023-26154: medium 5.9, EPSS 0.96%

pubnub Insufficient Entropy vulnerability

Action: Upgrade pubnub to 5.3.0 or later.

bundle update pubnub

Affected

Fixed versions

Sources

• osv: GHSA-5844-q3fc-56rh#RubyGems/pubnub
• https://nvd.nist.gov/vuln/detail/CVE-2023-26154
• https://github.com/pubnub/go/commit/428517fef5b901db7275d9f5a75eda89a4c28e08
• https://github.com/pubnub/javascript/commit/fb6cd0417cbb4ba87ea2d5d86a9c94774447e119
• https://security.snyk.io/vuln/SNYK-UNMANAGED-PUBNUBCCORE-6098379
• https://security.snyk.io/vuln/SNYK-SWIFT-PUBNUBSWIFT-6098381
• https://security.snyk.io/vuln/SNYK-RUST-PUBNUB-6098378
• https://security.snyk.io/vuln/SNYK-RUBY-PUBNUB-6098377
• https://security.snyk.io/vuln/SNYK-PYTHON-PUBNUB-6098375
• https://security.snyk.io/vuln/SNYK-PUB-PUBNUB-6098385
• https://security.snyk.io/vuln/SNYK-PHP-PUBNUBPUBNUB-6098376
• https://security.snyk.io/vuln/SNYK-JS-PUBNUB-5840690
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098380
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098371
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGOV7-6098374
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGO-6098373
• https://security.snyk.io/vuln/SNYK-DOTNET-PUBNUB-6098372
• https://security.snyk.io/vuln/SNYK-COCOAPODS-PUBNUB-6098384
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pubnub/CVE-2023-26154.yml
• https://github.com/pubnub/javascript/blob/master/src/crypto/modules/web.js#L70
• https://github.com/pubnub/javascript
• https://github.com/advisories/GHSA-5844-q3fc-56rh
• https://gist.github.com/vargad/20237094fce7a0a28f0723d7ce395bb0

CVE-2023-26154 · published 2023-12-06T06:30:20Z · modified 2026-07-07T17:56:14.430840384Z · JSON

crates.io/pubnub CVE-2023-26154: medium 5.9, EPSS 0.96%

pubnub Insufficient Entropy vulnerability

Action: Upgrade pubnub to 0.4.0 or later.

cargo update -p pubnub --precise 0.4.0

Affected

Fixed versions

Sources

• osv: GHSA-5844-q3fc-56rh#crates.io/pubnub
• https://nvd.nist.gov/vuln/detail/CVE-2023-26154
• https://github.com/pubnub/go/commit/428517fef5b901db7275d9f5a75eda89a4c28e08
• https://github.com/pubnub/javascript/commit/fb6cd0417cbb4ba87ea2d5d86a9c94774447e119
• https://security.snyk.io/vuln/SNYK-UNMANAGED-PUBNUBCCORE-6098379
• https://security.snyk.io/vuln/SNYK-SWIFT-PUBNUBSWIFT-6098381
• https://security.snyk.io/vuln/SNYK-RUST-PUBNUB-6098378
• https://security.snyk.io/vuln/SNYK-RUBY-PUBNUB-6098377
• https://security.snyk.io/vuln/SNYK-PYTHON-PUBNUB-6098375
• https://security.snyk.io/vuln/SNYK-PUB-PUBNUB-6098385
• https://security.snyk.io/vuln/SNYK-PHP-PUBNUBPUBNUB-6098376
• https://security.snyk.io/vuln/SNYK-JS-PUBNUB-5840690
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098380
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098371
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGOV7-6098374
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGO-6098373
• https://security.snyk.io/vuln/SNYK-DOTNET-PUBNUB-6098372
• https://security.snyk.io/vuln/SNYK-COCOAPODS-PUBNUB-6098384
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pubnub/CVE-2023-26154.yml
• https://github.com/pubnub/javascript/blob/master/src/crypto/modules/web.js#L70
• https://github.com/pubnub/javascript
• https://github.com/advisories/GHSA-5844-q3fc-56rh
• https://gist.github.com/vargad/20237094fce7a0a28f0723d7ce395bb0

CVE-2023-26154 · published 2023-12-06T06:30:20Z · modified 2026-07-07T17:56:14.430840384Z · JSON

Packagist/pubnub/pubnub CVE-2023-26154: medium 5.9, EPSS 0.96%

pubnub Insufficient Entropy vulnerability

Action: Upgrade pubnub/pubnub to 6.1.0 or later.

composer require pubnub/pubnub:6.1.0

Affected

Fixed versions

Sources

• osv: GHSA-5844-q3fc-56rh#Packagist/pubnub/pubnub
• https://nvd.nist.gov/vuln/detail/CVE-2023-26154
• https://github.com/pubnub/go/commit/428517fef5b901db7275d9f5a75eda89a4c28e08
• https://github.com/pubnub/javascript/commit/fb6cd0417cbb4ba87ea2d5d86a9c94774447e119
• https://security.snyk.io/vuln/SNYK-UNMANAGED-PUBNUBCCORE-6098379
• https://security.snyk.io/vuln/SNYK-SWIFT-PUBNUBSWIFT-6098381
• https://security.snyk.io/vuln/SNYK-RUST-PUBNUB-6098378
• https://security.snyk.io/vuln/SNYK-RUBY-PUBNUB-6098377
• https://security.snyk.io/vuln/SNYK-PYTHON-PUBNUB-6098375
• https://security.snyk.io/vuln/SNYK-PUB-PUBNUB-6098385
• https://security.snyk.io/vuln/SNYK-PHP-PUBNUBPUBNUB-6098376
• https://security.snyk.io/vuln/SNYK-JS-PUBNUB-5840690
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098380
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098371
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGOV7-6098374
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGO-6098373
• https://security.snyk.io/vuln/SNYK-DOTNET-PUBNUB-6098372
• https://security.snyk.io/vuln/SNYK-COCOAPODS-PUBNUB-6098384
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pubnub/CVE-2023-26154.yml
• https://github.com/pubnub/javascript/blob/master/src/crypto/modules/web.js#L70
• https://github.com/pubnub/javascript
• https://github.com/advisories/GHSA-5844-q3fc-56rh
• https://gist.github.com/vargad/20237094fce7a0a28f0723d7ce395bb0

CVE-2023-26154 · published 2023-12-06T06:30:20Z · modified 2026-07-07T17:56:14.430840384Z · JSON

PyPI/pubnub CVE-2023-26154: medium 5.9, EPSS 0.96%

pubnub Insufficient Entropy vulnerability

Action: Upgrade pubnub to 7.3.0 or later.

pip install pubnub==7.3.0

Affected

Fixed versions

Sources

• osv: GHSA-5844-q3fc-56rh#PyPI/pubnub
• https://nvd.nist.gov/vuln/detail/CVE-2023-26154
• https://github.com/pubnub/go/commit/428517fef5b901db7275d9f5a75eda89a4c28e08
• https://github.com/pubnub/javascript/commit/fb6cd0417cbb4ba87ea2d5d86a9c94774447e119
• https://security.snyk.io/vuln/SNYK-UNMANAGED-PUBNUBCCORE-6098379
• https://security.snyk.io/vuln/SNYK-SWIFT-PUBNUBSWIFT-6098381
• https://security.snyk.io/vuln/SNYK-RUST-PUBNUB-6098378
• https://security.snyk.io/vuln/SNYK-RUBY-PUBNUB-6098377
• https://security.snyk.io/vuln/SNYK-PYTHON-PUBNUB-6098375
• https://security.snyk.io/vuln/SNYK-PUB-PUBNUB-6098385
• https://security.snyk.io/vuln/SNYK-PHP-PUBNUBPUBNUB-6098376
• https://security.snyk.io/vuln/SNYK-JS-PUBNUB-5840690
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098380
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098371
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGOV7-6098374
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGO-6098373
• https://security.snyk.io/vuln/SNYK-DOTNET-PUBNUB-6098372
• https://security.snyk.io/vuln/SNYK-COCOAPODS-PUBNUB-6098384
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pubnub/CVE-2023-26154.yml
• https://github.com/pubnub/javascript/blob/master/src/crypto/modules/web.js#L70
• https://github.com/pubnub/javascript
• https://github.com/advisories/GHSA-5844-q3fc-56rh
• https://gist.github.com/vargad/20237094fce7a0a28f0723d7ce395bb0

CVE-2023-26154 · published 2023-12-06T06:30:20Z · modified 2026-07-07T17:56:14.430840384Z · JSON

Go/github.com/pubnub/go CVE-2023-26154: unknown, EPSS 0.96%

Insufficient entropy in AES-256-CBC in github.com/pubnub/go

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2023-2385
• https://github.com/advisories/GHSA-5844-q3fc-56rh
• https://github.com/pubnub/go/commit/428517fef5b901db7275d9f5a75eda89a4c28e08

CVE-2023-26154 · published 2024-01-02T18:32:37Z · modified 2026-07-07T17:56:14.430840384Z · JSON

Go/github.com/pubnub/go/v5 CVE-2023-26154: unknown, EPSS 0.96%

Insufficient entropy in AES-256-CBC in github.com/pubnub/go

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2023-2385#Go/github.com/pubnub/go/v5
• https://github.com/advisories/GHSA-5844-q3fc-56rh
• https://github.com/pubnub/go/commit/428517fef5b901db7275d9f5a75eda89a4c28e08

CVE-2023-26154 · published 2024-01-02T18:32:37Z · modified 2026-07-07T17:56:14.430840384Z · JSON

Go/github.com/pubnub/go/v6 CVE-2023-26154: unknown, EPSS 0.96%

Insufficient entropy in AES-256-CBC in github.com/pubnub/go

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2023-2385#Go/github.com/pubnub/go/v6
• https://github.com/advisories/GHSA-5844-q3fc-56rh
• https://github.com/pubnub/go/commit/428517fef5b901db7275d9f5a75eda89a4c28e08

CVE-2023-26154 · published 2024-01-02T18:32:37Z · modified 2026-07-07T17:56:14.430840384Z · JSON

Go/github.com/pubnub/go/v7 CVE-2023-26154: unknown, EPSS 0.96%

Insufficient entropy in AES-256-CBC in github.com/pubnub/go

Action: Upgrade github.com/pubnub/go/v7 to 7.2.0 or later.

go get github.com/pubnub/go/v7@v7.2.0

Affected

Fixed versions

Sources

• osv: GO-2023-2385#Go/github.com/pubnub/go/v7
• https://github.com/advisories/GHSA-5844-q3fc-56rh
• https://github.com/pubnub/go/commit/428517fef5b901db7275d9f5a75eda89a4c28e08

CVE-2023-26154 · published 2024-01-02T18:32:37Z · modified 2026-07-07T17:56:14.430840384Z · JSON

PyPI/pubnub CVE-2023-26154: medium 5.9, EPSS 0.96%

pubnub Insufficient Entropy vulnerability

Action: Upgrade pubnub to 7.3.0 or later.

pip install pubnub==7.3.0

Affected

Fixed versions

Sources

• osv: PYSEC-2026-1807
• https://nvd.nist.gov/vuln/detail/CVE-2023-26154
• https://github.com/pubnub/go/commit/428517fef5b901db7275d9f5a75eda89a4c28e08
• https://github.com/pubnub/javascript/commit/fb6cd0417cbb4ba87ea2d5d86a9c94774447e119
• https://security.snyk.io/vuln/SNYK-UNMANAGED-PUBNUBCCORE-6098379
• https://security.snyk.io/vuln/SNYK-SWIFT-PUBNUBSWIFT-6098381
• https://security.snyk.io/vuln/SNYK-RUST-PUBNUB-6098378
• https://security.snyk.io/vuln/SNYK-RUBY-PUBNUB-6098377
• https://security.snyk.io/vuln/SNYK-PYTHON-PUBNUB-6098375
• https://security.snyk.io/vuln/SNYK-PUB-PUBNUB-6098385
• https://security.snyk.io/vuln/SNYK-PHP-PUBNUBPUBNUB-6098376
• https://security.snyk.io/vuln/SNYK-JS-PUBNUB-5840690
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098380
• https://security.snyk.io/vuln/SNYK-JAVA-COMPUBNUB-6098371
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGOV7-6098374
• https://security.snyk.io/vuln/SNYK-GOLANG-GITHUBCOMPUBNUBGO-6098373
• https://security.snyk.io/vuln/SNYK-DOTNET-PUBNUB-6098372
• https://security.snyk.io/vuln/SNYK-COCOAPODS-PUBNUB-6098384
• https://github.com/rubysec/ruby-advisory-db/blob/master/gems/pubnub/CVE-2023-26154.yml
• https://github.com/pubnub/javascript/blob/master/src/crypto/modules/web.js#L70
• https://github.com/pubnub/javascript
• https://github.com/advisories/GHSA-5844-q3fc-56rh
• https://gist.github.com/vargad/20237094fce7a0a28f0723d7ce395bb0
• https://pypi.org/project/pubnub

CVE-2023-26154 · published 2026-07-07T11:45:28.184221Z · modified 2026-07-07T17:56:14.430840384Z · JSON