Centrifugal Centrifugo vulnerabilities
- centrifugal centrifugoCentrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends9.1 Critical
- centrifugal centrifugoCentrifugo: Decompression bomb DoS via permessage-deflate in unidirectional WebSocket transport8.7 High
- centrifugal centrifugoCentrifugo: Dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass8.2 High
- centrifugal centrifugoCentrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL9.3 Critical