The Tungstenite crate before 0.20.1 for Rust allows remote attackers to cause a denial of service (minutes of CPU consumption) via an excessive length of an HTTP header in a client handshake.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.02057·Published 2023-09-21·Fixed in 0.20.1CWE-400
