CVE-2020-27813 @ GoModules-github.com/gorilla/websocket-v1.4.0

[amitshalemCx]

Vulnerable Package issue exists @ GoModules-github.com/gorilla/websocket-v1.4.0 in branch main

An integer overflow vulnerability exists with the length of websocket frames received via a websocket connection. An attacker would use this flaw to cause a denial of service attack on an HTTP Server allowing websocket connections.

Namespace: amitshalemCx
Repository: ast-advanced-lab
Repository Url: https://github.com/amitshalemCx/ast-advanced-lab
CxAST-Project: amitshalemCx/ast-advanced-lab
CxAST platform scan: e4664af5-6704-4007-97f2-d490d09af097
Branch: main
Application: ast-advanced-lab
Severity: HIGH
State: NOT_IGNORED
Status: RECURRENT
CWE: CWE-190

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: HIGH
Remediation Upgrade Recommendation: v1.4.1

---

References
Advisory
Advisory
Other
Pull request
Commit