Executive brief
Centrifugo v6.6.0 dependency vulnerabilities
Affected products
- Go github.com/centrifugal/centrifugo/v6
Junglewise Threat Intelligence
Centrifugo v6.6.0 dependency vulnerabilities
Severity: info ยท Published 2026-02-19
Technologies: github.com/centrifugal/centrifugo/v6 (Go). Vendors: Go.
Related threats
- Centrifugal Centrifugo authentication bypass in JWKS endpoint verification
- GO-2026-4703 - Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning in github.com/centrifugal/centrifugo
- GO-2026-4702 - Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL in github.com/centrifugal/centrifugo
- Centrifugo's InsecureSkipTokenSignatureVerify flag silently disables JWT verification with no warning
- GO-2026-4528 - Centrifugo v6.6.0 dependency vulnerabilities in github.com/centrifugal/centrifugo