Skip to main content
cve.nowby Sazabi
← RubyGems
RubyGemsPackage

websocket-driver

4 known vulnerabilities (1 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 high, 3 medium
Registry
RubyGems

Advisories 4

  • websocket-driver: Denial of service via malformed Host header

    Affected: fixed in 0.8.2.

  • CVE-2026-54465Medium 6.3

    websocket-driver: Memory exhaustion in HTTP header parser

    Affected: fixed in 0.8.1.

  • CVE-2026-54463Medium 6.9

    websocket-driver: Memory exhaustion via abuse of protocol length headers

    Affected: fixed in 0.8.1.

  • CVE-2026-54464Medium 6.3

    websocket-driver: Resource limit bypass via message compression

    Affected: fixed in 0.8.1.