Skip to content
OpenAdvisories

Package · Debian

ruby-faye-websocket

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2020-15133

    Missing TLS certificate verification in Faye Websocket

    In faye-websocket before version 0.11.0, there is a lack of certification validation in TLS handshakes. The `Faye::WebSocket::Client` class uses the `EM::Connection#start_tls` method in EventMachine to implement the TLS handshake whenever a `wss:` URL is used…

    faye faye-websocket ruby-faye-websocket faye-websocket Debian Ubuntu RubyGems