StackRadar

GHSA-w67g-5rqw-f597

Medium

Advisory

Published 24 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
679
of 17,787 indexed, latest versions
Container images
679
deployed by those charts
Fix available
1 of 1
affected package

Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key

Carried by container images the latest versions of 679 of 17,787 indexed charts deploy, on 679 images.

Affected packageAffected versionsFixed inImages
github.com/gorilla/websocketgolangv1.4.0, v1.4.1, v1.4.2, v1.5.0+2 more1.5.3679
OSV records
GHSA-w67g-5rqw-f597GO-2026-6278

Charts affected

679 by stars
ChartLatestAffected imagesRadar Score
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

8,370
miniouninettsigma21.2.01 of 1See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

4,960
ciliumvks-helm-chartsVerified publisher1.17.142 of 3See more

cilium vks-helm-charts 1.17.14

2 of the 3 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
github.com/gorilla/websocket@v1.5.1
1.5.3
quay.io/cilium/operator-generic:v1.17.14773886ec9337
github.com/gorilla/websocket@v1.5.1
1.5.3

Open the chart page →

4,124
eth-validatorwateim1.4.51 of 3See more

eth-validator wateim 1.4.5

1 of the 3 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
ethereum/client-go:latest37575ec10fbc
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

5,077
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
github.com/gorilla/websocket@v1.4.1
1.5.3

Open the chart page →

5,484
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
github.com/gorilla/websocket@v1.4.1
1.5.3

Open the chart page →

11,167
azure-scheduledevents-managerwebdevopsVerified publisher1.0.171 of 1See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

1,124
apisixwenerme2.17.01 of 3See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

3,096
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
datawire/emissary:3.12.21f67a1292d2a
github.com/gorilla/websocket@v1.5.1
1.5.3

Open the chart page →

10,857
filebrowserwenerme1.0.01 of 1See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
github.com/gorilla/websocket@v1.4.1
1.5.3

Open the chart page →

3,174
juicefs-csi-driverwenerme0.32.52 of 5See more

juicefs-csi-driver wenerme 0.32.5

2 of the 5 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
juicedata/csi-dashboard:v0.32.5b5a407a27f62
github.com/gorilla/websocket@v1.5.0
1.5.3
juicedata/juicefs-csi-driver:v0.32.595008ba63318
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

8,824
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

15,287
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

6,915
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

6,138
temporalwenerme0.15.13 of 13See more

temporal wenerme 0.15.1

3 of the 13 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
github.com/gorilla/websocket@v1.4.1
1.5.3
temporalio/admin-tools:1.15.135034611d981
github.com/gorilla/websocket@v1.4.2
1.5.3
temporalio/server:1.15.1e26758f5a1bf
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

3,369
wexa-studiowexa-studio1.2.04 of 15See more

wexa-studio wexa-studio 1.2.0

4 of the 15 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.40b01ed3924e6
github.com/gorilla/websocket@v1.5.0
1.5.3
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
github.com/gorilla/websocket@v1.5.1
1.5.3
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
github.com/gorilla/websocket@v1.5.0
1.5.3
temporalio/server:1.29.1c1e3326b2ce1
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

14,618
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

2,022
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

2,745
postgres-operatorwiremindVerified publisher1.14.0-wiremind01 of 1See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

1,286
commentopluspluswyrihaximusnetVerified publisher0.4.01 of 1See more

commentoplusplus wyrihaximusnet 0.4.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
caroga/commentoplusplus:v1.8.7f3233882b3bd
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

1,960
oauth2xdVerified publisher1.0.01 of 1See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/hufu:v1.2.13d5752dac834
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

2,007
owlxdVerified publisher0.5.12 of 2See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/owl-console:v0.11.2c79a67657baf
github.com/gorilla/websocket@v1.5.0
1.5.3
lishimeng/owl-messager:v0.11.23d00485e64dc
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

3,880
passportxdVerified publisher0.2.162 of 2See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/passport:v0.2.163e7d05ded625
github.com/gorilla/websocket@v1.5.0
1.5.3
lishimeng/passport-profile:v0.2.160970dfe5dc8f
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

3,974
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

7,685
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

1,955
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

13,197
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

9,381

Container images carrying it

679 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
temporalio/auto-setup:1.29.7f14912b699cf
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
temporalio/server:1.26.21e2626efcbc1
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
temporalio/server:1.25.08a5798191dea
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
temporalio/server:1.29.1c1e3326b2ce1
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
temporalio/server:1.22.0ddeebf8bad8f
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
temporalio/server:1.15.1e26758f5a1bf
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
thanosio/thanos:v0.15.0b12d5c31bf5a
github.com/gorilla/websocket@v1.4.0
github.com/gorilla/websocket@v1.4.0
1.5.3
1.5.3
1
thesisrobot/lnd:v0.16.4-beta-c287129953689
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
thesisrobot/lnd:v0.14.1-betad94c8dbf6dac
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
thijsvanloef/palworld-server-docker:v2.7.1401d3eb5c053
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
thijsvanloef/palworld-server-docker:v2.5.0b4ac9ee22483
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
tile38/tile38:1.33.4afb7e82f9485
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
toucansoftware/spa-reloader:latestc187b1fba501
github.com/gorilla/websocket@v1.4.1
github.com/gorilla/websocket@v1.4.1
1.5.3
1.5.3
1
traefik/whoami:v1.10.21474027c3166
github.com/gorilla/websocket@v1.5.1
github.com/gorilla/websocket@v1.5.1
1.5.3
1.5.3
1
traefik/whoami:v1.6.12c52bb2c8480
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
traefik/whoami:v1.8.08d0f943abdbf
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
traefik/whoami:v1.6.0d38496bf0900
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
traggo/server:0.2.3f1ced637510e
github.com/gorilla/websocket@v1.4.0
github.com/gorilla/websocket@v1.4.0
1.5.3
1.5.3
1
turt2live/matrix-media-repo:v1.2.8bfbd459f89a5
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
vearch/vearch:3.3.40768af33f9d9
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
veecode/devportal-admin-ui:0.4.30c69fd286b489
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
volcanosh/vc-webhook-manager:v1.12.1f8b50088a732
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
wazuh/wazuh-manager:4.11.11da5c38c6a78
github.com/gorilla/websocket@v1.4.1
github.com/gorilla/websocket@v1.4.1
1.5.3
1.5.3
1
wazuh/wazuh-manager:4.4.121994f40e0da
github.com/gorilla/websocket@v1.4.1
github.com/gorilla/websocket@v1.4.1
1.5.3
1.5.3
1
wazuh/wazuh-manager:4.14.45a065930682d
github.com/gorilla/websocket@v1.4.1
github.com/gorilla/websocket@v1.4.1
1.5.3
1.5.3
1
wazuh/wazuh-manager:4.14.3f09282d281f6
github.com/gorilla/websocket@v1.4.1
github.com/gorilla/websocket@v1.4.1
1.5.3
1.5.3
1
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
zabbix/zabbix-agent2:ubuntu-7.0.237322a94c5d7a
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
zer0tonin/mikochi:1.11.009872bae1554
github.com/gorilla/websocket@v1.5.1
github.com/gorilla/websocket@v1.5.1
1.5.3
1.5.3
1
gcr.io/datadoghq/cluster-agent:7.61.06efe04ba4e06
github.com/gorilla/websocket@v1.5.1
github.com/gorilla/websocket@v1.5.1
1.5.3
1.5.3
1
gcr.io/istio-testing/operator:latest8d4576f7b98f
github.com/gorilla/websocket@v1.5.1
github.com/gorilla/websocket@v1.5.1
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator08315309da4b
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator1e3db4f2eeed
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.13.121f8e11a44bf
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.2.593ff6e693577
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/activatora5de0fb75046
github.com/gorilla/websocket@v1.4.0
github.com/gorilla/websocket@v1.4.0
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/activator:v1.10.2c2994c2b6c2c
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.2.5007820fdb75b
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler105bdd14ecaa
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler2ef460356b17
github.com/gorilla/websocket@v1.4.0
github.com/gorilla/websocket@v1.4.0
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.13.134796e9f760b
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscaler:v1.10.28319aa662b49
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/autoscalerdb6ceff2aab4
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller30ce73388ae5
github.com/gorilla/websocket@v1.4.0
github.com/gorilla/websocket@v1.4.0
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.13.153d9aa4d2c7a
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.2.575cfdcfa050a
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/controller:v1.10.298a2cc7fd62e
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerb2cd45b8a8a4
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/controllerbac158dfb0c7
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.2.523baa1932232
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.