Lucene search

K
osvGoogleOSV:GHSA-3XH2-74W9-5VXM
HistoryMay 18, 2021 - 9:08 p.m.

Integer overflow in github.com/gorilla/websocket

2021-05-1821:08:02
Google
osv.dev
22

0.004 Low

EPSS

Percentile

75.1%

An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections.

CPENameOperatorVersion
github.com/gorilla/websocketlt1.4.1