StackRadar

GHSA-w67g-5rqw-f597

Medium

Advisory

Published 24 Aug 2026In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.9
base score, highest
EPSS
probability of exploitation
CISA KEV
Not listed
no confirmed exploitation
Charts affected
679
of 17,787 indexed, latest versions
Container images
679
deployed by those charts
Fix available
1 of 1
affected package

Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key

Carried by container images the latest versions of 679 of 17,787 indexed charts deploy, on 679 images.

Affected packageAffected versionsFixed inImages
github.com/gorilla/websocketgolangv1.4.0, v1.4.1, v1.4.2, v1.5.0+2 more1.5.3679
OSV records
GHSA-w67g-5rqw-f597GO-2026-6278

Charts affected

679 by stars
ChartLatestAffected imagesRadar Score
jupyterhubuninettsigma21.6.01 of 5See more

jupyterhub uninettsigma2 1.6.0

1 of the 5 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
bitnamilegacy/kubectl:1.301249fc292e84
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

8,370
miniouninettsigma21.2.01 of 1See more

minio uninettsigma2 1.2.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
sigma2as/minio:20240306-3a2e4f5c284ead9ec3e
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

4,960
ciliumvks-helm-chartsVerified publisher1.17.142 of 3See more

cilium vks-helm-charts 1.17.14

2 of the 3 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
quay.io/cilium/cilium:v1.17.14cdcfab5b4466
github.com/gorilla/websocket@v1.5.1
1.5.3
quay.io/cilium/operator-generic:v1.17.14773886ec9337
github.com/gorilla/websocket@v1.5.1
1.5.3

Open the chart page →

4,124
eth-validatorwateim1.4.51 of 3See more

eth-validator wateim 1.4.5

1 of the 3 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
ethereum/client-go:latest37575ec10fbc
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

5,077
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
github.com/gorilla/websocket@v1.4.1
1.5.3

Open the chart page →

5,484
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
github.com/gorilla/websocket@v1.4.1
1.5.3

Open the chart page →

11,167
azure-scheduledevents-managerwebdevopsVerified publisher1.0.171 of 1See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

1,124
apisixwenerme2.17.01 of 3See more

apisix wenerme 2.17.0

1 of the 3 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
bitnamilegacy/etcd:latest99b408c15272
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

3,096
emissary-ingresswenerme8.12.21 of 2See more

emissary-ingress wenerme 8.12.2

1 of the 2 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
datawire/emissary:3.12.21f67a1292d2a
github.com/gorilla/websocket@v1.5.1
1.5.3

Open the chart page →

10,857
filebrowserwenerme1.0.01 of 1See more

filebrowser wenerme 1.0.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
filebrowser/filebrowser:v2.13.0c5d0a75a0041
github.com/gorilla/websocket@v1.4.1
1.5.3

Open the chart page →

3,174
juicefs-csi-driverwenerme0.32.52 of 5See more

juicefs-csi-driver wenerme 0.32.5

2 of the 5 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
juicedata/csi-dashboard:v0.32.5b5a407a27f62
github.com/gorilla/websocket@v1.5.0
1.5.3
juicedata/juicefs-csi-driver:v0.32.595008ba63318
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

8,824
longhornwenerme1.2.31 of 2See more

longhorn wenerme 1.2.3

1 of the 2 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
longhornio/longhorn-manager:v1.2.3dca34321452c
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

15,287
miniowenerme8.0.101 of 1See more

minio wenerme 8.0.10

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2021-02-14T04-01-33Zbd11edda91f3
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

6,915
minio-standalonewenerme1.0.21 of 1See more

minio-standalone wenerme 1.0.2

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

6,138
temporalwenerme0.15.13 of 13See more

temporal wenerme 0.15.1

3 of the 13 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
grafana/grafana:6.7.11ff3999e0fc0
github.com/gorilla/websocket@v1.4.1
1.5.3
temporalio/admin-tools:1.15.135034611d981
github.com/gorilla/websocket@v1.4.2
1.5.3
temporalio/server:1.15.1e26758f5a1bf
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

3,369
wexa-studiowexa-studio1.2.04 of 15See more

wexa-studio wexa-studio 1.2.0

4 of the 15 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
hashicorp/vault:1.15.40b01ed3924e6
github.com/gorilla/websocket@v1.5.0
1.5.3
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
github.com/gorilla/websocket@v1.5.1
1.5.3
temporalio/admin-tools:1.29.1-tctl-1.18.4-cli-1.5.0a3a52e6ca122
github.com/gorilla/websocket@v1.5.0
1.5.3
temporalio/server:1.29.1c1e3326b2ce1
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

14,618
opentelemetry-collectorwikimedia0.62.71 of 1See more

opentelemetry-collector wikimedia 0.62.7

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

2,022
wireguardwireguard-bananas1.5.01 of 1See more

wireguard wireguard-bananas 1.5.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
place1/wg-access-server:v0.4.62b2f3ea80ed6
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

2,745
postgres-operatorwiremindVerified publisher1.14.0-wiremind01 of 1See more

postgres-operator wiremind 1.14.0-wiremind0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
ghcr.io/zalando/postgres-operator:v1.14.04f40cfc2283b
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

1,286
commentopluspluswyrihaximusnetVerified publisher0.4.01 of 1See more

commentoplusplus wyrihaximusnet 0.4.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
caroga/commentoplusplus:v1.8.7f3233882b3bd
github.com/gorilla/websocket@v1.4.2
1.5.3

Open the chart page →

1,960
oauth2xdVerified publisher1.0.01 of 1See more

oauth2 xd 1.0.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/hufu:v1.2.13d5752dac834
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

2,007
owlxdVerified publisher0.5.12 of 2See more

owl xd 0.5.1

2 of the 2 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/owl-console:v0.11.2c79a67657baf
github.com/gorilla/websocket@v1.5.0
1.5.3
lishimeng/owl-messager:v0.11.23d00485e64dc
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

3,880
passportxdVerified publisher0.2.162 of 2See more

passport xd 0.2.16

2 of the 2 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/passport:v0.2.163e7d05ded625
github.com/gorilla/websocket@v1.5.0
1.5.3
lishimeng/passport-profile:v0.2.160970dfe5dc8f
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

3,974
tabbyxdVerified publisher1.0.61 of 2See more

tabby xd 1.0.6

1 of the 2 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/tabby:v1.0.48145c3dc83c8
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

7,685
treexdVerified publisher0.1.101 of 1See more

tree xd 0.1.10

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/tree:v0.2.89b2f8be6c7d3
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

1,997
zooxdVerified publisher0.4.01 of 1See more

zoo xd 0.4.0

1 of the 1 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
lishimeng/zoo:v0.4.0e0b8d2d8ca28
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

1,955
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

13,197
ygdrassil-monitoringygdrassilVerified publisher0.4.01 of 10See more

ygdrassil-monitoring ygdrassil 0.4.0

1 of the 10 container images this version deploys carry GHSA-w67g-5rqw-f597.

Container imageDigestPackageFixed in
quay.io/prometheus/prometheus:v3.1.06559acbd5d77
github.com/gorilla/websocket@v1.5.0
1.5.3

Open the chart page →

9,381

Container images carrying it

679 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
macropower/twitch_predictions_recorder:v0.21e9c4fb89787
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
mantlenetworkio/l2geth:v0.4.36bf383d14291
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
markdegroot/unifi-protect-arm64:latestd8445f2a0de6
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
mattermost/focalboard:0.9.031078df7a3c8
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
mattermost/focalboard:0.6.7f2f987dada52
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
mattermost/mattermost-app-chaosengine:c153e436268954edd67
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
mavrick1/kubestellar-b:latest45ca0429a1d4
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
milvusdb/etcd:3.5.5-r2102aac62827b
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
milvusdb/etcd:3.5.25-r1fededb2f2d63
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
milvusdb/milvus:v2.2.13a3a55e1c1497
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
minio/minio:RELEASE.2022-01-04T07-41-07Z1484c87239ea
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
minio/minio:RELEASE.2024-05-28T17-19-04Z391d1d45fdbe
github.com/gorilla/websocket@v1.5.1
github.com/gorilla/websocket@v1.5.1
1.5.3
1.5.3
1
minio/minio:RELEASE.2024-01-16T16-07-38Z4c4a4876193f
github.com/gorilla/websocket@v1.5.1
github.com/gorilla/websocket@v1.5.1
1.5.3
1.5.3
1
minio/minio:RELEASE.2024-01-18T22-51-28Z551682a57a94
github.com/gorilla/websocket@v1.5.1
github.com/gorilla/websocket@v1.5.1
1.5.3
1.5.3
1
minio/minio:RELEASE.2023-03-20T20-16-18Z6d770d7f255c
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
minio/minio:RELEASE.2023-11-20T22-40-07Zb833a1699b4f
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
minio/minio:RELEASE.2022-10-24T18-35-07Zf9576903f19d
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
minio/minio:RELEASE.2023-01-12T02-06-16Zfc6bedc99355
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
mirrorgitlabcontainers/gitlab-workhorse-ce:v13.2.2a6d7bf42805a
github.com/gorilla/websocket@v1.4.0
github.com/gorilla/websocket@v1.4.0
1.5.3
1.5.3
1
murtazashah46/helmfile:latest4d11726cf803
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
netapp/controller:25.11.0-bxp-preview06f6c9a0653f
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
nethermind/nethermind:latest1b6b01419de4
github.com/gorilla/websocket@v1.5.1
github.com/gorilla/websocket@v1.5.1
1.5.3
1.5.3
1
netrisai/controller-telescope:4.6.0.00414d82948a8b2
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
nutanix/cn-rwx-operator:1.1.00082e0cebd42
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
odavid/my-bloody-jenkins:2.462.3-306e7ab3bbc948e
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
offchainlabs/nitro-node:v3.7.6-c0fe95e9f779fa84b7b
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
offchainlabs/nitro-node:v3.1.0-7d1d84ce95865866129
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
openkruise/kruise-manager:v1.8.30482722b4e56
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
openkruise/kruise-manager:v1.9.1f81ae78a36a4
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
openpolicyagent/gatekeeper-crds:v3.17.177bc9bf3d163
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
opsgenie/kubernetes-event-exporter:0.9ecb246e4d260
github.com/gorilla/websocket@v1.4.1
github.com/gorilla/websocket@v1.4.1
1.5.3
1.5.3
1
oryd/hydra:v2.3.0b94007e19a1f
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
oryd/kratos:v1.1.08f15006a080d
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
otel/opentelemetry-collector:0.100.09e36620d6c2c
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
otel/opentelemetry-collector:0.59.0ee9da0b08d83
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
otel/opentelemetry-collector-contrib:0.83.071fcef33ae71
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
otel/opentelemetry-collector-contrib:0.108.0923eb1cfae32
github.com/gorilla/websocket@v1.5.1
github.com/gorilla/websocket@v1.5.1
1.5.3
1.5.3
1
otel/opentelemetry-collector-contrib:0.89.0995f17004231
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
otel/opentelemetry-collector-contrib:0.81.0c6671841470b
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
otel/opentelemetry-collector-contrib:0.63.1dfb3a55ea8c9
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
pannoi/kollektor:1.0.59559617788fc
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
percona/percona-xtradb-cluster-operator:1.14.03232ae01d0ff
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
phntom/chadbot:0.2.397c28e4178ad
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
phntom/goalert:0.0.298ca4df55499b
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
phntom/mattermost-team-edition:9.3.051cf9da4aa2e
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
phntom/mindav:0.1.7-kix35695f546abbb
github.com/gorilla/websocket@v1.4.2
github.com/gorilla/websocket@v1.4.2
1.5.3
1.5.3
1
photoprism/photoprism:231128-ce284de9cc4f9c
github.com/gorilla/websocket@v1.5.1
github.com/gorilla/websocket@v1.5.1
1.5.3
1.5.3
1
photoprism/photoprism:220629-jammy2954334adbda
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
pinclr/v2ray-proxy:latestf37f250b7091
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1
pnnlmiscscripts/gitlab-runner-operator:0.1.3-1155131891741
github.com/gorilla/websocket@v1.5.0
github.com/gorilla/websocket@v1.5.0
1.5.3
1.5.3
1

syft 1.42.1 · advisories as of 15 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.