websocket-driver-ruby vulnerabilities
3 known vulnerabilities in websocket-driver-ruby from Faye. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.9 High severity
websocket-driver-ruby: Uncaught Exception
websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server() passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to cras
- 7.5 High severity
websocket-driver-ruby: Allocation of Resources Without Limits or Throttling
websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, when websocket-driver is used to implement a WebSocket server on top of a TCP server using WebSocket::Driver.server() or to complement a WebSocket client, a peer can make a si
- 7.5 High severity
websocket-driver-ruby: Allocation of Resources Without Limits or Throttling
websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, draft versions of the WebSocket protocol in websocket-driver include a length header that allows an arbitrarily large integer to be encoded as bytes with the high bit set, and