Products: 1
Vulnerabilities: 4
Known Exploited: 0
2
Critical Level Threats
1
High Level Threats
0
Medium Level Threats
0
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-71485
Centrifugo: Client-forgeable headers emulation lets any client spoof headers forwarded to proxy backends
Last Modified: Aug 25, 2026
Published: Aug 20, 2026
CVE-2026-62963
Centrifugo: Decompression bomb DoS via permessage-deflate in unidirectional WebSocket transport
Last Modified: Jul 17, 2026
Published: Jul 16, 2026
CVE-2026-49998
Centrifugo: Dynamic JWKS key cache keyed only by `kid` allows cross-issuer JWT authentication bypass
Last Modified: Jul 17, 2026
Published: Jul 16, 2026
CVE-2026-32301
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL
Last Modified: Mar 23, 2026
Published: Mar 12, 2026
Items Per Page
