github.com/centrifugal/centrifugo/v4
Scalable real-time messaging server in a language-agnostic way. Self-hosted alternative to Pubnub, Pusher, Ably, socket.io, Phoenix.PubSub, SignalR. Set up once and forever.
View on Github
Activity
- Latest release
- 3y ago
- Total releases
- 13
- Cadence
- ~19 days
- Last 12 months
- 0
Reach
- Stars
- 10.7k
Details
- First release
- Jul 09, 2022
| Version | Released | |
|---|---|---|
v4.1.5
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v4.1.5
patch
Dependencies (29)
+ 21 more |
|
v4.1.4
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v4.1.4
patch
Dependencies (29)
+ 21 more |
|
v4.1.3
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v4.1.3
patch
Dependencies (29)
+ 21 more |
|
v4.1.2
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v4.1.2
patch
Dependencies (28)
+ 20 more |
|
v4.1.1
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v4.1.1
patch
Dependencies (28)
+ 20 more |
|
v4.1.0
minor
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v4.1.0
minor
Dependencies (27)
+ 19 more |
|
v4.0.5
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v4.0.5
patch
Dependencies (27)
+ 19 more |
|
v4.0.4
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v4.0.4
patch
Dependencies (27)
+ 19 more |
|
v4.0.3
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v4.0.3
patch
Dependencies (27)
+ 19 more |
|
v4.0.2
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v4.0.2
patch
Dependencies (27)
+ 19 more |
|
v4.0.1
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v4.0.1
patch
Dependencies (27)
+ 19 more |
|
v4.0.0
initial
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v4.0.0
initial
Dependencies (26)
+ 18 more |
|
v4.0.0-beta.1
pre
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v4.0.0-beta.1
pre
Dependencies (25)
+ 17 more |