github.com/centrifugal/centrifugo/v3
Scalable real-time messaging server in a language-agnostic way. Self-hosted alternative to Pubnub, Pusher, Ably, socket.io, Phoenix.PubSub, SignalR. Set up once and forever.
View on Github
Activity
- Latest release
- 4y ago
- Total releases
- 14
- Cadence
- ~19 days
- Last 12 months
- 0
Reach
- Stars
- 10.7k
Details
- First release
- Jul 12, 2021
| Version | Released | |
|---|---|---|
v3.2.3
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v3.2.3
patch
Dependencies (24)
+ 16 more |
|
v3.2.2
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v3.2.2
patch
Dependencies (24)
+ 16 more |
|
v3.2.1
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v3.2.1
patch
Dependencies (24)
+ 16 more |
|
v3.2.0
minor
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v3.2.0
minor
Dependencies (24)
+ 16 more |
|
v3.1.1
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v3.1.1
patch
Dependencies (24)
+ 16 more |
|
v3.1.0
minor
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v3.1.0
minor
Dependencies (24)
+ 16 more |
|
v3.0.5
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v3.0.5
patch
Dependencies (24)
+ 16 more |
|
v3.0.4
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v3.0.4
patch
Dependencies (24)
+ 16 more |
|
v3.0.3
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v3.0.3
patch
Dependencies (24)
+ 16 more |
|
v3.0.2
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v3.0.2
patch
Dependencies (24)
+ 16 more |
|
v3.0.1
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v3.0.1
patch
Dependencies (24)
+ 16 more |
|
v3.0.0
initial
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v3.0.0
initial
Dependencies (24)
+ 16 more |
|
v3.0.0-beta.2
pre
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v3.0.0-beta.2
pre
Dependencies (25)
+ 17 more |
|
v3.0.0-beta.1
pre
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v3.0.0-beta.1
pre
Dependencies (25)
+ 17 more |