Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

gost使用的gorilla/websocket 1.4.0存在漏洞,请作者更新! #617

Closed
proxy666-dev opened this issue Jul 6, 2020 · 3 comments
Closed
Labels
TODO TODO list

Comments

@proxy666-dev
Copy link
Contributor

gost使用的gorilla/websocket 1.4.0存在漏洞,请作者更新!详情请访问:GHSA-jf24-p9p9-4rjh
gorilla/websocket#537

@proxy666-dev
Copy link
Contributor Author

@ginuerzh 我对这个问题提了PR,来处理下。

@proxy666-dev
Copy link
Contributor Author

module github.com/ginuerzh/gost

go 1.15

require (
git.torproject.org/pluggable-transports/obfs4.git v0.0.0-20181103133120-08f4d470188e
github.com/Yawning/chacha20 v0.0.0-20170904085104-e3b1f968fc63 // indirect
github.com/bifurcation/mint v0.0.0-20181105071958-a14404e9a861 // indirect
github.com/ginuerzh/tls-dissector v0.0.2-0.20200224064855-24ab2b3a3796
github.com/lucas-clemente/quic-go v0.10.0
github.com/milosgajdos83/tenus v0.0.0-20190415114537-1f3ed00ae7d8
github.com/shadowsocks/shadowsocks-go v0.0.0-20170121203516-97a5c71f80ba
)

@proxy666-dev
Copy link
Contributor Author

module github.com/ginuerzh/gost

go 1.15

require (
git.torproject.org/pluggable-transports/obfs4.git v0.0.0-20181103133120-08f4d470188e
github.com/Yawning/chacha20 v0.0.0-20170904085104-e3b1f968fc63 // indirect
github.com/bifurcation/mint v0.0.0-20181105071958-a14404e9a861 // indirect
github.com/ginuerzh/tls-dissector v0.0.2-0.20200224064855-24ab2b3a3796
github.com/lucas-clemente/quic-go v0.10.0
github.com/milosgajdos83/tenus v0.0.0-20190415114537-1f3ed00ae7d8
github.com/shadowsocks/shadowsocks-go v0.0.0-20170121203516-97a5c71f80ba
)

上面的不能改,一改编译就出错。

ginuerzh pushed a commit that referenced this issue Dec 6, 2020
hktalent pushed a commit to hktalent/gost that referenced this issue Oct 23, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
TODO TODO list
Projects
None yet
Development

No branches or pull requests

1 participant