Browse all 3 CVE security advisories affecting centrifugal. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-62963 | Centrifugo: Decompression bomb DoS via permessage-deflate in unidirectional WebSocket transport — centrifugoCWE-409 | - | - | 2026-07-16 |
| CVE-2026-49998 | Centrifugo: Dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass — centrifugoCWE-347 | 8.2 | High | 2026-07-16 |
| CVE-2026-32301 | Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL — centrifugoCWE-918 | 9.3 | Critical | 2026-03-12 |
This page lists every published CVE security advisory associated with centrifugal. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.