2 matches found
rubygem-websocket-extensions: ReDoS vulnerability in Sec-WebSocket-Extensions parser
A flaw was found in the websocket-extensions ruby module in versions prior to 0.1.5. The parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and another character. When abused by an...
7.5CVSS7.3AI score0.04404EPSS
SaveExploits1References5
20