Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Debian · 9 | ruby-websocket-extensions | 0.1.2-1+deb9u1 |
Vulnerabilities 1
-
High 8.2
Regular Expression Denial of Service in websocket-extensions (RubyGem)
websocket-extensions ruby module prior to 0.1.5 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte seque…