GO-2026-6278
MediumAdvisory
Published 24 Aug 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.9
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 672
- of 17,781 indexed, latest versions
- Container images
- 670
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key
Carried by container images the latest versions of 672 of 17,781 indexed charts deploy, on 670 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.4.0, v1.4.1, v1.4.2, v1.5.0+2 more | 1.5.3 | 670 |
- OSV records
- GHSA-w67g-5rqw-f597GO-2026-6278
Charts affected
672 by stars
Container images carrying it
670 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bitnamilegacy/ | 744f84cf7493 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| bitnamilegacy/ | f5fc0d561d9e | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| bitnamilegacy/ | 0b60b6565ab2 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| bitnamilegacy/ | 0f7c8ac484ac | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| bitnamilegacy/ | 5bb0aa825d16 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| bitnamilegacy/ | 08b1b7cb6a5b | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| bolkedebruin/ | c0dc0589373a | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| burganbank/ | 9259c34e4037 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| caroga/ | f3233882b3bd | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| casbin/ | 770ad9ec3190 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| chainflag/ | ac642796bcb6 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| chaosnative/ | e7bcff4a20c0 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| chirpstack/ | e0b23dfd24d6 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| chirpstack/ | fb7667fe037f | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| chirpstack/ | ce3f2cdca8a9 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| chirpstack/ | c0bbbb7a3f1e | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| cloudflare/ | 14d9c6b01b29 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| cloudflare/ | 5d5f70a59d5e | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| cloudflare/ | c18744ae1767 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| cloudflare/ | eb5c9324efe3 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| consensys/ | f146a51a1ba3 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| containous/ | 587162516502 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| cortezaproject/ | 0bcdcbcd3c63 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| cortezaproject/ | 8eb7a26605c9 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| cortezaproject/ | cb9f200de5d2 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| daprio/ | 4be696707bd1 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| daprio/ | 7ba5d51e5b97 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| darkobas/ | 62e6464491ba | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| darkobas/ | a0349a0eedf0 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| datamate/ | 2dd66b722464 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| datawire/ | 95ec30b3c732 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| datawire/ | 1f67a1292d2a | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| ddvk/ | 2f5c45cbf0c5 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| defactops/ | 825cdf9ba706 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| devspacecloud/ | 49c397413f7b | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| dnsforge/ | 4d9a685c8c28 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| dserio83/ | 6b3d9115fee2 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| elastic/ | c7a1c63257d0 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| emqx/ | a8431baa7950 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| emqx/ | fa876f71e5d6 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| emqxecp/ | 4c31d9bec846 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| epamedp/ | 93417e18bb1a | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| ethereum/ | 1f36ca5922a5 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| ethereum/ | 32b878e4144a | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| ethereum/ | 37575ec10fbc | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| ethereum/ | 6d6d12a40465 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| ethereum/ | 886ec69b35b0 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| ethereum/ | b8ab3451a117 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| ethereum/ | cce21b423165 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| ethereum/ | d99fbb9585c7 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |