Vendor/product archive

websockets_project / websockets CVEs

Beta · best-effort

2 CVEs tagged to websockets_project / websockets — 0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to websockets_project vendor archive

CVE-2021-33880

Published Jun 6, 2021

The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(c…

CVSS 5.9 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-1000518

Published Jun 26, 2018

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with co…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-2 of 2 CVEsPage 1 of 1