code.cloudfoundry.org/gorouter/route contains the source code for the Cloud Foundry L7 HTTP router.
Affected versions of the package are vulnerable to Information Exposure or Denial of Service. It mishandles
WebSocket requests for AWS Application Load Balancers (ALBs) and some other
HTTP-aware Load Balancers. A user with developer privileges could use this vulnerability to steal data or cause denial of service.
code.cloudfoundry.org/gorouter/route to version 0.172.0 or higher.
Do your applications use this vulnerable package?