Centrifugo Dynamic JWKS Cache Bypass Allows Cross-Issuer JWT Auth

github.com 2026-07-17查看中文 →

Security AdvisoryHighCentrifugo

Affected:

github.com/centrifugal/centrifugo/v6 <= 6.8.0

Fixed in:

6.8.1

Referenced CVEs: CVE-2026-49998 · 8.2

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Netty CVE-2025-56822: Race Condition in OcsServerCertificateValidator Async OCSP Validation 2026-07-29 Netty Out-of-date OCSP Response Accepted - Certificate Revocation Bypass 2026-07-29 ClickHouse Client SQL Injection via Trailing Backslash 2026-07-29 SQL Injection in @hypequery/clickhouse parameter escaping (CVE-2024-5468) 2026-07-29 SQL Injection Vulnerability in @hypequery/clickhouse escapeValue Function and Fix 2026-07-29

Offline Archive

Offline screenshot & PDF are Pro-exclusive