Junglewise Threat Intelligence

Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key

Severity: medium · CVSS 4 · Published 2026-08-24

Technologies: github.com/gorilla/websocket (Go). Vendors: Go.

Executive brief

Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key

Affected products

  • Go github.com/gorilla/websocket

Related threats