packages:
  - module: github.com/ecnepsnai/web
    symbols:
      - Server.socketHandler
    derived_symbols:
      - Server.Socket
    versions:
      - fixed: 1.5.2
description: |
    Web Sockets do not execute any AuthenticateMethod methods which may be set,leading to a
    nil pointer dereference if the returned UserData pointer is assumed to be non-nil, or
    authentication bypass.
published: 2021-07-28T18:08:05Z
cve_metadata:
    id: CVE-2021-4236
    cwe: 'CWE-400: Uncontrolled Resource Consumption'
ghsas:
  - GHSA-5gjg-jgh4-gppm
links:
    commit: https://github.com/ecnepsnai/web/commit/5a78f8d5c41ce60dcf9f61aaf47a7a8dc3e0002f