Vulnerabilities

TI-2026-39323 CVE-2026-54466 · GHSA-xv26-6w52-cph6

websocket-driver: Message corruption via abuse of protocol length headers

MEDIUM 46

websocket-driver is a WebSocket protocol handler with pluggable I/O.

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.0038 Published 2026-07-17 Fixed in 0.7.5 CWE-130

TI-2026-39322 CVE-2026-54465 · GHSA-8j3g-f24p-4mpw

LOW 29

websocket-driver is a WebSocket protocol handler with pluggable I/O.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00488 Published 2026-07-17 Fixed in 0.8.1 CWE-770

TI-2026-39320 CVE-2026-54463 · GHSA-ghhp-3qvg-889p

LOW 37

websocket-driver is a WebSocket protocol handler with pluggable I/O.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00488 Published 2026-07-17 Fixed in 0.8.1 CWE-770