| packages: |
| - module: github.com/ecnepsnai/web |
| symbols: |
| - Server.socketHandler |
| derived_symbols: |
| - Server.Socket |
| versions: |
| - fixed: 1.5.2 |
| description: | |
| Web Sockets do not execute any AuthenticateMethod methods which may be set,leading to a |
| nil pointer dereference if the returned UserData pointer is assumed to be non-nil, or |
| authentication bypass. |
| published: 2021-07-28T18:08:05Z |
| cve_metadata: |
| id: CVE-2021-4236 |
| cwe: 'CWE-400: Uncontrolled Resource Consumption' |
| ghsas: |
| - GHSA-5gjg-jgh4-gppm |
| links: |
| commit: https://github.com/ecnepsnai/web/commit/5a78f8d5c41ce60dcf9f61aaf47a7a8dc3e0002f |
