Faye vulnerabilities
We track 4 vulnerabilities in Faye products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on August 17, 2026.
Latest Faye vulnerabilities
- 8.9 High severity
websocket-driver-ruby: Uncaught Exception
websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server() passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to cras
- 7.5 High severity
websocket-driver-node: Improper Handling of Length Parameter Inconsistency
websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitrarily large integer to be encoded as a sequence of bytes with the hi
- 7.5 High severity
websocket-driver-ruby: Allocation of Resources Without Limits or Throttling
websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, when websocket-driver is used to implement a WebSocket server on top of a TCP server using WebSocket::Driver.server() or to complement a WebSocket client, a peer can make a si
- 7.5 High severity
websocket-driver-ruby: Allocation of Resources Without Limits or Throttling
websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, draft versions of the WebSocket protocol in websocket-driver include a length header that allows an arbitrarily large integer to be encoded as bytes with the high bit set, and