Faye-websocket Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Faye-websocket Project records in CISA KEV

No Faye-websocket Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Faye-websocket · all components

TI-2020-11906 CVE-2020-15133 · GHSA-2v5c-755p-p4gv

LOW 39

In faye-websocket before version 0.11.0, there is a lack of certification validation in TLS handshakes.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00918 Published 2020-07-31 Fixed in 0.11.0 CWE-295