Denial of service via malformed Host header in websocket-driver-ruby (CVE-2026-61666)

The websocket-driver-ruby library fails to catch `URI::InvalidURIError` exceptions raised when parsing a malformed `Host` header in WebSocket server mode. A remote client can exploit this by sending an invalid `Host` header value, causing an unhandled exception that crashes the server process unless the application explicitly catches the error from the `parse()` method. Affected versions: - < 0.8.2 We recommend updating to: >= 0.8.2. CVSS ? · our assessment: this_week Reference: https://github.com/faye/websocket-driver-ruby/security/advisories/GHSA-2x63-gw47-w4mm Details: https://vuln.today/cve/CVE-2026-61666