GO-2026-6278
MediumAdvisory
Published 24 Aug 2026In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.9
- base score, highest
- EPSS
- —
- probability of exploitation
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 668
- of 17,787 indexed, latest versions
- Container images
- 668
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key
Carried by container images the latest versions of 668 of 17,787 indexed charts deploy, on 668 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v1.4.0, v1.4.1, v1.4.2, v1.5.0+2 more | 1.5.3 | 668 |
- OSV records
- GHSA-w67g-5rqw-f597GO-2026-6278
Charts affected
668 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,230 |
| miniowenerme | 8.0.10 | 1 of 1See more | 6,915 |
| minio-standalonewenerme | 1.0.2 | 1 of 1See more | 6,138 |
| temporalwenerme | 0.15.1 | 3 of 13See more | 22,665 |
| traefikwenerme | 9.1.1 | 1 of 1See more | 3,369 |
| wexa-studiowexa-studio | 1.2.0 | 4 of 15See more | 14,983 |
| opentelemetry-collectorwikimedia | 0.62.7 | 1 of 1See more | 2,022 |
| wireguardwireguard-bananas | 1.5.0 | 1 of 1See more | 2,745 |
| postgres-operatorwiremindVerified publisher | 1.14.0-wiremind0 | 1 of 1See more | 1,286 |
| commentopluspluswyrihaximusnetVerified publisher | 0.4.0 | 1 of 1See more | 1,960 |
| oauth2xdVerified publisher | 1.0.0 | 1 of 1See more | 2,007 |
| owlxdVerified publisher | 0.5.1 | 2 of 2See more | 3,880 |
| passportxdVerified publisher | 0.2.16 | 2 of 2See more | 3,974 |
| tabbyxdVerified publisher | 1.0.6 | 1 of 2See more | 7,673 |
| treexdVerified publisher | 0.1.10 | 1 of 1See more | 1,997 |
| zooxdVerified publisher | 0.4.0 | 1 of 1See more | 1,955 |
| xkopsxkops | 0.1.0 | 1 of 5See more | 13,677 |
| ygdrassil-monitoringygdrassilVerified publisher | 0.4.0 | 1 of 10See more | 9,381 |
Container images carrying it
668 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| kubevirtmanager/ | df3ea27d4a9e | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| kusionstack/ | 126c8f0b0976 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| kvalitetsit/ | f57e7553f5bd | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| layer5/ | fde47c141ec6 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| layer5/ | b99c73bac1f5 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| leonardomulticloud/ | d119918900e8 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | 2a232a42256f | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | 851f91d24121 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | aa3df78ecf32 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | dd43b430341a | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | 28e98eece020 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | 507a3eecf809 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | 794079a7f241 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | addb86c0c520 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | 0a5157f742d2 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | 1489caffaedb | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | 1957e3314f43 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | 2f603f8d3abe | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | 5d47b7bb2546 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | 7d0228d19042 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | eda951fd29a8 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | f5af5a5ce17f | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| library/ | f98ac9dd97b0 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| lishimeng/ | 3d5752dac834 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| lishimeng/ | c79a67657baf | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| lishimeng/ | 3d00485e64dc | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| lishimeng/ | 3e7d05ded625 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| lishimeng/ | 0970dfe5dc8f | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| lishimeng/ | 8145c3dc83c8 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| lishimeng/ | 9b2f8be6c7d3 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| lishimeng/ | e0b8d2d8ca28 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| livekit/ | 1ab01641b366 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| livekit/ | 8391fd1b834f | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| logiqai/ | 65b996bc7bdc | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| longhornio/ | dca34321452c | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| longhornio/ | ede61fe2a472 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| louislam/ | 059b49d64739 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| louislam/ | 0b55bcb83a1c | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| louislam/ | 3d632903e6af | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| louislam/ | 3e24e96c89ef | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| louislam/ | 4c364ef96aad | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| louislam/ | 91e963bfda56 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| louislam/ | 96510915e6be | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| louislam/ | 9865163f92c1 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| louislam/ | a4eab252e5a2 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| louislam/ | a84767d7934f | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| louislam/ | bc6f244ecf27 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| macropower/ | 1e9c4fb89787 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| mantlenetworkio/ | 6bf383d14291 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |
| markdegroot/ | d8445f2a0de6 | github.com/ github.com/ | 1.5.3 1.5.3 | 1 |