Centrifugal vulnerabilities
Products
Newest
- centrifugal centrifugo Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends 9.1 Critical
- centrifugal centrifugo Centrifugo: Decompression bomb DoS via permessage-deflate in unidirectional WebSocket transport 8.7 High
- centrifugal centrifugo Centrifugo: Dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass 8.2 High
- centrifugal centrifugo Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL 9.3 Critical