Websockets

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2021-33880 PyPI MEDIUM PATCH This Month

The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.

Python Information Disclosure Websockets Communications Cloud Native Core Policy Communications Cloud Native Core Security Edge Protection Proxy +2

NVD GitHub

CVSS 3.1

5.9

EPSS

2.3%

CVE-2018-1000518 PyPI HIGH POC PATCH This Week

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Websockets

NVD GitHub

CVSS 3.1

7.5

EPSS

1.8%

CVE-2021-33880 PyPI

EPSS 2% CVSS 5.9

MEDIUM PATCH This Month

Python Information Disclosure Websockets +4

NVD GitHub

CVE-2018-1000518 PyPI

EPSS 2% CVSS 7.5

HIGH POC PATCH This Week

Denial Of Service Websockets

NVD GitHub