github.com/centrifugal/centrifugo/v5
Scalable real-time messaging server in a language-agnostic way. Self-hosted alternative to Pubnub, Pusher, Ably, socket.io, Phoenix.PubSub, SignalR. Set up once and forever.
Activity
- Latest release
- 1y ago
- Total releases
- 20
- Cadence
- ~24 days
- Last 12 months
- 0
Reach
- Stars
- 10.7k
Details
- First release
- Sep 27, 2023
| Version | Released | |
|---|---|---|
v5.4.9
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.4.9
patch
Dependencies (46)
+ 38 more |
|
v5.4.8
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.4.8
patch
Dependencies (46)
+ 38 more |
|
v5.4.7
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.4.7
patch
Dependencies (46)
+ 38 more |
|
v5.4.6
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.4.6
patch
Dependencies (46)
+ 38 more |
|
v5.4.5
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.4.5
patch
Dependencies (44)
+ 36 more |
|
v5.4.4
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.4.4
patch
Dependencies (44)
+ 36 more |
|
v5.4.3
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.4.3
patch
Dependencies (44)
+ 36 more |
|
v5.4.2
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.4.2
patch
Dependencies (44)
+ 36 more |
|
v5.4.1
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.4.1
patch
Dependencies (44)
+ 36 more |
|
v5.4.0
minor
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.4.0
minor
Dependencies (44)
+ 36 more |
|
v5.3.2
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.3.2
patch
Dependencies (44)
+ 36 more |
|
v5.3.1
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.3.1
patch
Dependencies (44)
+ 36 more |
|
v5.3.0
minor
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.3.0
minor
Dependencies (44)
+ 36 more |
|
v5.2.2
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.2.2
patch
Dependencies (43)
+ 35 more |
|
v5.2.1
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.2.1
patch
Dependencies (43)
+ 35 more |
|
v5.2.0
minor
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.2.0
minor
Dependencies (43)
+ 35 more |
|
v5.1.2
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.1.2
patch
Dependencies (39)
+ 31 more |
|
v5.1.1
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.1.1
patch
Dependencies (39)
+ 31 more |
|
v5.1.0
minor
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.1.0
minor
Dependencies (39)
+ 31 more |
|
v5.0.4
initial
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo References Updated Feb 23, 2026 · Source: OSV.dev |
v5.0.4
initial
Dependencies (39)
+ 31 more |