StackRadar

GHSA-w67g-5rqw-f597

Medium

Advisory

Published 24 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
679
of 17,787 indexed, latest versions
Container images
679
deployed by those charts
Fix available
1 of 1
affected package

Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key

Carried by container images the latest versions of 679 of 17,787 indexed charts deploy, on 679 images.

Affected packageAffected versionsFixed inImages
github.com/gorilla/websocketgolangv1.4.0, v1.4.1, v1.4.2, v1.5.0+2 more1.5.3679
OSV records
GHSA-w67g-5rqw-f597GO-2026-6278

Charts affected

679 by stars
ChartLatestAffected imagesRadar Score
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

8,370
miniouninettsigma21.2.01 of 1See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

4,960
ciliumvks-helm-chartsVerified publisher1.17.142 of 3See more

cilium vks-helm-charts 1.17.14

2 of the 3 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
github.com/gorilla/websocket@v1.5.1
1.5.3
quay.io/cilium/operator-generic:v1.17.14773886ec9337
github.com/gorilla/websocket@v1.5.1
1.5.3

Open the chart page →

4,124
eth-validatorwateim1.4.51 of 3See more

eth-validator wateim 1.4.5

1 of the 3 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
ethereum/client-go:latest37575ec10fbc
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

5,077
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
github.com/gorilla/websocket@v1.4.1
1.5.3

Open the chart page →

5,484
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
github.com/gorilla/websocket@v1.4.1
1.5.3

Open the chart page →

11,167
azure-scheduledevents-managerwebdevopsVerified publisher1.0.171 of 1See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

1,124
apisixwenerme2.17.01 of 3See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

3,096
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
datawire/emissary:3.12.21f67a1292d2a
github.com/gorilla/websocket@v1.5.1
1.5.3

Open the chart page →

10,857
filebrowserwenerme1.0.01 of 1See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
github.com/gorilla/websocket@v1.4.1
1.5.3

Open the chart page →

3,174
juicefs-csi-driverwenerme0.32.52 of 5See more

juicefs-csi-driver wenerme 0.32.5

2 of the 5 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
juicedata/csi-dashboard:v0.32.5b5a407a27f62
github.com/gorilla/websocket@v1.5.0
1.5.3
juicedata/juicefs-csi-driver:v0.32.595008ba63318
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

8,824
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

15,287
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

6,915
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

6,138
temporalwenerme0.15.13 of 13See more

temporal wenerme 0.15.1

3 of the 13 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
github.com/gorilla/websocket@v1.4.1
1.5.3
temporalio/admin-tools:1.15.135034611d981
github.com/gorilla/websocket@v1.4.2
1.5.3
temporalio/server:1.15.1e26758f5a1bf
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

3,369
wexa-studiowexa-studio1.2.04 of 15See more

wexa-studio wexa-studio 1.2.0

4 of the 15 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.40b01ed3924e6
github.com/gorilla/websocket@v1.5.0
1.5.3
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
github.com/gorilla/websocket@v1.5.1
1.5.3
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
github.com/gorilla/websocket@v1.5.0
1.5.3
temporalio/server:1.29.1c1e3326b2ce1
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

14,618
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

2,022
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

2,745
postgres-operatorwiremindVerified publisher1.14.0-wiremind01 of 1See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

1,286
commentopluspluswyrihaximusnetVerified publisher0.4.01 of 1See more

commentoplusplus wyrihaximusnet 0.4.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
caroga/commentoplusplus:v1.8.7f3233882b3bd
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

1,960
oauth2xdVerified publisher1.0.01 of 1See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/hufu:v1.2.13d5752dac834
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

2,007
owlxdVerified publisher0.5.12 of 2See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/owl-console:v0.11.2c79a67657baf
github.com/gorilla/websocket@v1.5.0
1.5.3
lishimeng/owl-messager:v0.11.23d00485e64dc
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

3,880
passportxdVerified publisher0.2.162 of 2See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/passport:v0.2.163e7d05ded625
github.com/gorilla/websocket@v1.5.0
1.5.3
lishimeng/passport-profile:v0.2.160970dfe5dc8f
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

3,974
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

7,685
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

1,955
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

13,197
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

9,381

Container images carrying it

679 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mappinge384a295069b
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/domain-mapping:v1.10.2f66c41ad7a73
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook1282a399cbb9
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.10.24305209ce498
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.13.1700c69915dc7
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/webhook:v1.2.59084ea8498ea
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/webhookd27b4495ccc3
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
gcr.io/knative-releases/knative.dev/serving/cmd/webhookf16c0e022203
github.com/gorilla/websocket@v1.4.0
github.com/gorilla/websocket@v1.4.0
1.5.3
1.5.3
1
gcr.io/ml-pipeline/api-server:2.3.039661bd823e8
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
gcr.io/ml-pipeline/api-server:2.0.0-alpha.5dc6ca05bb94f
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
gcr.io/ml-pipeline/cache-server:2.3.0293941ee4f65
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
gcr.io/ml-pipeline/cache-server:2.0.0-alpha.583e79c709df3
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
gcr.io/ml-pipeline/persistenceagent:2.0.0-alpha.500db9796a37b
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
gcr.io/ml-pipeline/persistenceagent:2.3.0109ac1b38c41
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
gcr.io/ml-pipeline/scheduledworkflow:2.0.0-alpha.5795a0c8a0e13
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
gcr.io/ml-pipeline/scheduledworkflow:2.3.0f7e67e0bc071
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
gcr.io/ml-pipeline/workflow-controller:v3.3.8-license-compliance6c8e4e2a6443
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
ghcr.io/adfinis/kubernetes-etcd-backup:v1.4.68ec6c4812a7e
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
ghcr.io/akhilrex/podgrab:1.0.0bce133f3f511
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
ghcr.io/andylibrian/terjang:latest20a46b199247
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
ghcr.io/appscode/grafana:v2025.2.367d18880448c
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
ghcr.io/appscode/trivydb:0.0.367ffb0309acb
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
ghcr.io/argonix-io/argonix-api:1.0.0cb5f24732197
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
ghcr.io/arpa-network/node-client:latest657a2c9f6e6d
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
ghcr.io/astriaorg/astria-indexer-api:0.1.03490d9900af1
github.com/gorilla/websocket@v1.5.1
github.com/gorilla/websocket@v1.5.1
1.5.3
1.5.3
1
ghcr.io/astriaorg/flame:0.1.0c8af1c5aae40
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
ghcr.io/astriaorg/ria-faucet:0.0.1a06c8ebef427
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
ghcr.io/automata-network/multi-prover-avs/operator:v0.6.0752f1aa02438
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
ghcr.io/banzaicloud/log-socket:latesta514736d2d4d
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
ghcr.io/base-org/node:v0.11.11aba0ffe55ea
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
ghcr.io/browsersec/kubebrowse:sha-09dfa1fb853e9e6372a
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
ghcr.io/buoyantio/prometheus:v3.3.1e2b8aa62b648
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
ghcr.io/caninehq/canine:latesta058034ca006
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
ghcr.io/chaos-mesh/chaos-daemon:v2.7.29608d9b51452
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
ghcr.io/chaos-mesh/chaos-daemon:v2.5.1cf78fdf7403a
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
ghcr.io/chaos-mesh/chaos-mesh:v2.5.1700bb42ac21d
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
ghcr.io/chaos-mesh/chaos-mesh:v2.7.28bc853c7414c
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
ghcr.io/clastix/kamaji-console:v0.2.129ecf8d4fa65
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
ghcr.io/clusternet/clusternet-controller-manager:v1.0.02ce077d3d02d
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
ghcr.io/clusternet/clusternet-hub:v1.0.059f75504c5d4
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
ghcr.io/clusternet/clusternet-scheduler:v1.0.0a6ae5aff81ce
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
ghcr.io/cosmo-workspace/dev-code-server:v0.0.316fda01ae58a
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
ghcr.io/crazy-max/cloudflared:2025.9.19b4e856d18f6
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
ghcr.io/dask/dask-notebook:2024.1.0f53bde3acd4f
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
ghcr.io/devplayer0/octolxd:0.1.119b18fd97eab
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
ghcr.io/emissary-ingress/emissary:4.1.04a981156abee
github.com/gorilla/websocket@v1.5.1
github.com/gorilla/websocket@v1.5.1
1.5.3
1.5.3
1
ghcr.io/ente/server:0472c929b6070e61fecaf2013d47efce2dcda462f646b68a1b8d
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
ghcr.io/epinio/epinio-ui:v1.7.1-0.0.1d3de52dfb0b4
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
ghcr.io/eumel8/rancher-servicemonitor:0.2.1f34428cac187
github.com/gorilla/websocket@v1.5.1
github.com/gorilla/websocket@v1.5.1
1.5.3
1.5.3
1
ghcr.io/fluxcd/flux-cli:v2.5.1274a179fd402
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.