Skip to content

Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL

Critical severity GitHub Reviewed Published Mar 12, 2026 in centrifugal/centrifugo • Updated Mar 27, 2026
0 Open 0 Closed
Type
Filter by repository type
All
Public
Private
Internal
Sort
Sort by
Newest
Oldest

No open alerts for this advisory

Give feedback on Dependabot alerts