GO-2026-6278
MediumAdvisory
Published 24 Aug 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.9
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 679
- of 17,787 indexed, latest versions
- Container images
- 679
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key
Carried by container images the latest versions of 679 of 17,787 indexed charts deploy, on 679 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.4.0, v1.4.1, v1.4.2, v1.5.0+2 more | 1.5.3 | 679 |
- OSV records
- GHSA-w67g-5rqw-f597GO-2026-6278
Charts affected
679 by stars
Container images carrying it
679 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| quay.io/ | 0f5b104bdd1b | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 0dcdb1c1e747 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 4fbd63194674 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 34de6387233b | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 5702ea361420 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 796f75ea413b | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | c3d20bc2ea08 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | c6b68f158628 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | d853057f2800 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 65a38180e27a | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 35f9c3ad644a | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 0bbe8b451fa3 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | c241c971aef8 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 1c6818e5e505 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 3b9b2a15d376 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 4748e26f9369 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 56e7f18e05dd | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 5888c188cf09 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 63805ebb8d2b | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 6927e0919a14 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 9abc6cf6aea7 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | f20d3127bf28 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 7b4202c25b67 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | 6ba82beff18e | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| quay.io/ | c43b3a9d98ae | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| registry.k8s.io/ | e36c08168342 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| registry.k8s.io/ | 3c5268158974 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| registry.k8s.io/ | 8ccae74fc039 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| registry.k8s.io/ | e0b2d217d1d2 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |