github.com/centrifugal/centrifugo/v6 vulnerabilities (Go)
5 vulnerabilities.
github.com/centrifugal/centrifugo/v6GoCentrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends9.1 Criticalgithub.com/centrifugal/centrifugo/v6GoCentrifugo: Dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass8.2 Highgithub.com/centrifugal/centrifugo/v6GoCentrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning0.0 Nonegithub.com/centrifugal/centrifugo/v6GoCentrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL9.3 Criticalgithub.com/centrifugal/centrifugo/v6GoCentrifugo v6.6.0 dependency vulnerabilitiesNo score