Vulnerabilities

TI-2021-13200 CVE-2021-33880 · GHSA-8ch4-58qp-g3mp

The aaugustin websockets library before 9.1 for Python has an Observable Timing…

LOW 31

The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...).

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02265 Published 2021-06-06 Fixed in 9.1 CWE-203

TI-2018-15918 CVE-2018-1000518 · GHSA-6g87-ff9q-v847

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed…

LOW 36

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01805 Published 2018-06-26 Fixed in 5.0 CWE-400

Vulnerabilities

Filters

The aaugustin websockets library before 9.1 for Python has an Observable Timing…

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed…