github.com/centrifugal/centrifugo/v6
Scalable real-time messaging server in a language-agnostic way. Self-hosted alternative to Pubnub, Pusher, Ably, socket.io, Phoenix.PubSub, SignalR. Set up once and forever.
View on Github
Activity
- Latest release
- 21h ago
- Total releases
- 25
- Cadence
- ~12 days
- Last 12 months
- 22
Reach
- Stars
- 10.7k
Details
- First release
- Aug 10, 2025
| Version | Released | |
|---|---|---|
v6.9.6
patch
|
v6.9.6
patch
Dependencies (63)
+ 55 more |
|
v6.9.5
patch
|
v6.9.5
patch
Dependencies (63)
+ 55 more |
|
v6.9.4
patch
|
v6.9.4
patch
Dependencies (63)
+ 55 more |
|
v6.9.3
patch
|
v6.9.3
patch
Dependencies (62)
+ 54 more |
|
v6.9.2
patch
|
v6.9.2
patch
Dependencies (62)
+ 54 more |
|
v6.9.1
patch
|
v6.9.1
patch
Dependencies (62)
+ 54 more |
|
v6.9.0
minor
|
v6.9.0
minor
Dependencies (62)
+ 54 more |
|
v6.8.4
patch
|
v6.8.4
patch
Dependencies (62)
+ 54 more |
|
v6.8.3
patch
|
v6.8.3
patch
Dependencies (62)
+ 54 more |
|
v6.8.2
patch
|
v6.8.2
patch
Dependencies (62)
+ 54 more |
|
v6.8.1
patch
|
v6.8.1
patch
Dependencies (61)
+ 53 more |
|
v6.8.0
minor
1 CVE
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Fixed in
6.8.1
Updated Jul 07, 2026 · Source: OSV.dev |
v6.8.0
minor
Dependencies (61)
+ 53 more |
|
v6.7.2
patch
1 CVE
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Fixed in
6.8.1
Updated Jul 07, 2026 · Source: OSV.dev |
v6.7.2
patch
Dependencies (60)
+ 52 more |
|
v6.7.1
patch
1 CVE
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Fixed in
6.8.1
Updated Jul 07, 2026 · Source: OSV.dev |
v6.7.1
patch
Dependencies (61)
+ 53 more |
|
v6.7.0
minor
1 CVE
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Fixed in
6.8.1
Updated Jul 07, 2026 · Source: OSV.dev |
v6.7.0
minor
Dependencies (61)
+ 53 more |
|
v6.6.2
patch
3 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Fixed in
6.8.1
Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev |
v6.6.2
patch
Dependencies (61)
+ 53 more |
|
v6.6.1
patch
3 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Fixed in
6.8.1
Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev |
v6.6.1
patch
Dependencies (61)
+ 53 more |
|
v6.6.0
minor
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Fixed in
6.8.1
Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Fixed in
6.6.1
References Updated Feb 23, 2026 · Source: OSV.dev |
v6.6.0
minor
Dependencies (61)
+ 53 more |
|
v6.5.2
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Fixed in
6.8.1
Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Fixed in
6.6.1
References Updated Feb 23, 2026 · Source: OSV.dev |
v6.5.2
patch
Dependencies (61)
+ 53 more |
|
v6.5.1
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Fixed in
6.8.1
Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Fixed in
6.6.1
References Updated Feb 23, 2026 · Source: OSV.dev |
v6.5.1
patch
Dependencies (61)
+ 53 more |
|
v6.5.0
minor
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Fixed in
6.8.1
Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Fixed in
6.6.1
References Updated Feb 23, 2026 · Source: OSV.dev |
v6.5.0
minor
Dependencies (61)
+ 53 more |
|
v6.4.0
minor
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Fixed in
6.8.1
Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Fixed in
6.6.1
References Updated Feb 23, 2026 · Source: OSV.dev |
v6.4.0
minor
Dependencies (60)
+ 52 more |
|
v6.3.1
patch
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Fixed in
6.8.1
Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Fixed in
6.6.1
References Updated Feb 23, 2026 · Source: OSV.dev |
v6.3.1
patch
Dependencies (60)
+ 52 more |
|
v6.3.0
minor
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Fixed in
6.8.1
Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Fixed in
6.6.1
References Updated Feb 23, 2026 · Source: OSV.dev |
v6.3.0
minor
Dependencies (60)
+ 52 more |
|
v6.2.5
initial
4 CVEs
CVE-2026-49998
GO-2026-5872
GHSA-g6vg-wj8f-48cj
Jul 07, 2026
Centrifugo's dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass in github.com/centrifugal/centrifugo Centrifugo's dynamic JWKS key cache keyed only by Fixed in
6.8.1
Updated Jul 07, 2026 · Source: OSV.dev
GO-2026-4703
GHSA-q926-c743-49qj
Mar 26, 2026
Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
CVE-2026-32301
GO-2026-4702
GHSA-j77h-rr39-c552
Mar 26, 2026
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo Fixed in
6.7.0
References Updated Mar 26, 2026 · Source: OSV.dev
GO-2026-4528
GHSA-j9wf-6r2x-hqmx
Feb 23, 2026
Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo Fixed in
6.6.1
References Updated Feb 23, 2026 · Source: OSV.dev |
v6.2.5
initial
Dependencies (59)
+ 51 more |