Read the docs

Websocket-extensions Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Websocket-extensions Project records in CISA KEV

No Websocket-extensions Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Websocket-extensions · all components

Priority MEDIUM 40

websocket-extensions ruby module prior to 0.1.5 allows Denial of Service (DoS) via Regex Backtracking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.04639 Published 2020-06-02 Partial fix · 0.1.5 CWE-400
Priority LOW 38

websocket-extensions npm module prior to 0.1.4 allows Denial of Service (DoS) via Regex Backtracking.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03088 Published 2020-06-02 Partial fix · 0.1.4 CWE-400
Open these records in search →