github.com/centrifugal/centrifugo/v5 vulnerabilities (Go)
5 vulnerabilities.
github.com/centrifugal/centrifugo/v5GoCentrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends9.1 Criticalgithub.com/centrifugal/centrifugo/v5GoCentrifugo: Dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass8.2 Highgithub.com/centrifugal/centrifugo/v5GoCentrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning0.0 Nonegithub.com/centrifugal/centrifugo/v5GoCentrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL9.3 Criticalgithub.com/centrifugal/centrifugo/v5GoCentrifugo v6.6.0 dependency vulnerabilitiesNo score