Read the docs

Faye Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Faye Project records in CISA KEV

No Faye Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Faye 2 records MEDIUM

Records

2 records in Faye · all components

TI-2020-08894 CVE-2020-11020 · GHSA-qpg4-4w7w-2mq5

Authentication and extension bypass in Faye

Priority MEDIUM 45

Faye (NPM, RubyGem) versions greater than 0.5.0 and before 1.0.4, 1.1.3 and 1.2.5, has the potential for authentication bypass in the extension system.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01573 Published 2020-04-29 Fixed in 1.0.4, 1.1.3 +1 CWE-287
TI-2020-11907 CVE-2020-15134 · GHSA-3q49-h8f9-9fr9

Missing TLS certificate verification in Faye

Priority LOW 39

Faye before version 1.4.0, there is a lack of certification validation in TLS handshakes.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00864 Published 2020-07-31 Fixed in 1.4.0 CWE-295
Open these records in search →