github.com/gorilla/websocket
Activity
- Latest release
- 2y ago
- Total releases
- 11
- Cadence
- ~7 months
- Last 12 months
- 0
Reach
- Stars
- —
Details
- First release
- Apr 28, 2016
| Version | Released | |
|---|---|---|
v1.5.3
patch
|
v1.5.3
patch
|
|
v1.5.2
patch
1 CVE
GO-2026-6278
GHSA-w67g-5rqw-f597
Aug 25, 2026
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Fixed in
1.5.3
References Updated Aug 26, 2026 · Source: OSV.dev |
v1.5.2
patch
Dependencies (1)
|
|
v1.5.1
patch
1 CVE
GO-2026-6278
GHSA-w67g-5rqw-f597
Aug 25, 2026
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Fixed in
1.5.3
References Updated Aug 26, 2026 · Source: OSV.dev |
v1.5.1
patch
Dependencies (1)
|
|
v1.5.0
minor
1 CVE
GO-2026-6278
GHSA-w67g-5rqw-f597
Aug 25, 2026
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Fixed in
1.5.3
References Updated Aug 26, 2026 · Source: OSV.dev |
v1.5.0
minor
|
|
v1.4.2
patch
1 CVE
GO-2026-6278
GHSA-w67g-5rqw-f597
Aug 25, 2026
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Fixed in
1.5.3
References Updated Aug 26, 2026 · Source: OSV.dev |
v1.4.2
patch
|
|
v1.4.1
patch
1 CVE
GO-2026-6278
GHSA-w67g-5rqw-f597
Aug 25, 2026
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Fixed in
1.5.3
References Updated Aug 26, 2026 · Source: OSV.dev |
v1.4.1
patch
|
|
v1.4.0
minor
2 CVEs
GO-2026-6278
GHSA-w67g-5rqw-f597
Aug 25, 2026
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Fixed in
1.5.3
References Updated Aug 26, 2026 · Source: OSV.dev
CVE-2020-27813
GHSA-3xh2-74w9-5vxm
GHSA-jf24-p9p9-4rjh
GO-2020-0019
May 18, 2021
Integer overflow in github.com/gorilla/websocket
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections. Fixed in
1.4.1
References
Updated Nov 08, 2023 · Source: OSV.dev |
v1.4.0
minor
|
|
v1.3.0
minor
2 CVEs
GO-2026-6278
GHSA-w67g-5rqw-f597
Aug 25, 2026
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Fixed in
1.5.3
References Updated Aug 26, 2026 · Source: OSV.dev
CVE-2020-27813
GHSA-3xh2-74w9-5vxm
GHSA-jf24-p9p9-4rjh
GO-2020-0019
May 18, 2021
Integer overflow in github.com/gorilla/websocket
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections. Fixed in
1.4.1
References
Updated Nov 08, 2023 · Source: OSV.dev |
v1.3.0
minor
|
|
v1.2.0
minor
2 CVEs
GO-2026-6278
GHSA-w67g-5rqw-f597
Aug 25, 2026
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Fixed in
1.5.3
References Updated Aug 26, 2026 · Source: OSV.dev
CVE-2020-27813
GHSA-3xh2-74w9-5vxm
GHSA-jf24-p9p9-4rjh
GO-2020-0019
May 18, 2021
Integer overflow in github.com/gorilla/websocket
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections. Fixed in
1.4.1
References
Updated Nov 08, 2023 · Source: OSV.dev |
v1.2.0
minor
|
|
v1.1.0
minor
2 CVEs
GO-2026-6278
GHSA-w67g-5rqw-f597
Aug 25, 2026
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Fixed in
1.5.3
References Updated Aug 26, 2026 · Source: OSV.dev
CVE-2020-27813
GHSA-3xh2-74w9-5vxm
GHSA-jf24-p9p9-4rjh
GO-2020-0019
May 18, 2021
Integer overflow in github.com/gorilla/websocket
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections. Fixed in
1.4.1
References
Updated Nov 08, 2023 · Source: OSV.dev |
v1.1.0
minor
|
|
v1.0.0
initial
2 CVEs
GO-2026-6278
GHSA-w67g-5rqw-f597
Aug 25, 2026
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Fixed in
1.5.3
References Updated Aug 26, 2026 · Source: OSV.dev
CVE-2020-27813
GHSA-3xh2-74w9-5vxm
GHSA-jf24-p9p9-4rjh
GO-2020-0019
May 18, 2021
Integer overflow in github.com/gorilla/websocket
7.5
/ 10
High
Network
Low
None
None
Unchanged
None
None
High
An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections. Fixed in
1.4.1
References
Updated Nov 08, 2023 · Source: OSV.dev |
v1.0.0
initial
|