Websockets Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Websockets Project records in CISA KEV

No Websockets Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Websockets 2 records LOW

Records

2 records in Websockets · all components

TI-2018-15918 CVE-2018-1000518 · GHSA-6g87-ff9q-v847

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed…

LOW 36

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01805 Published 2018-06-26 Fixed in 5.0 CWE-400

TI-2021-13200 CVE-2021-33880 · GHSA-8ch4-58qp-g3mp

The aaugustin websockets library before 9.1 for Python has an Observable Timing…

LOW 31

The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02265 Published 2021-06-06 Fixed in 9.1 CWE-203

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0