github.com/gorilla/websocket vulnerabilities
CVEs whose affected-version data names the github.com/gorilla/websocket package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
GO-2026-6278NoneGorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket
▾ Sunlitgorilla · github.com/gorilla/websocketvia OSV
GHSA-w67g-5rqw-f597MediumGorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key
▾ Sunlitgorilla · github.com/gorilla/websocketvia GHSA