TI-2026-24830 CVE-2026-32301 · GHSA-j77h-rr39-c552
Centrifugo: SSRF via unverified JWT claims interpolated into dynamic JWKS endpoint URL
Priority HIGH 79
Centrifugo is an open-source scalable real-time messaging server.
No centrifugal vulnerabilities are listed in CISA KEV.
1 record in Centrifugo · all components
Centrifugo is an open-source scalable real-time messaging server.