Product · faye

websocket-driver-ruby

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 8.9

CVE-2026-61666

websocket-driver: Denial of service via malformed Host header

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server() passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to cra…

faye websocket-driver-ruby ruby-websocket-driver websocket-driver Debian Ubuntu RubyGems

Aug 17, 2026