Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 4

Количество 4

ubuntu логотип

CVE-2026-61666

18 дней назад

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server() passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when the application does not catch the error from parse(). This issue is fixed in version 0.8.2.

EPSS: Низкий
nvd логотип

CVE-2026-61666

18 дней назад

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server() passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when the application does not catch the error from parse(). This issue is fixed in version 0.8.2.

EPSS: Низкий
debian логотип

CVE-2026-61666

18 дней назад

websocket-driver is a WebSocket protocol handler with pluggable I/O. P ...

EPSS: Низкий
github логотип

GHSA-2x63-gw47-w4mm

около 1 месяца назад

websocket-driver-ruby: Denial of service via malformed Host header

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2026-61666

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server() passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when the application does not catch the error from parse(). This issue is fixed in version 0.8.2.

0%
Низкий
18 дней назад
nvd логотип
CVE-2026-61666

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server() passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when the application does not catch the error from parse(). This issue is fixed in version 0.8.2.

0%
Низкий
18 дней назад
debian логотип
CVE-2026-61666

websocket-driver is a WebSocket protocol handler with pluggable I/O. P ...

0%
Низкий
18 дней назад
github логотип
GHSA-2x63-gw47-w4mm

websocket-driver-ruby: Denial of service via malformed Host header

0%
Низкий
около 1 месяца назад

Уязвимостей на страницу