ai.mrs:masons-java-sdk (>=1.0.0 <=1.2.3), app.keyconnect:keyconnect-chainbase (=1.0.0) +629 more potentially affected by CVE-2020-11050 via org.java-websocket:Java-WebSocket (>=1.3.0 <=1.4.1)

org.java-websocket:Java-WebSocket MAVEN version =1.3.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.1, =1.3-RELEASE, =1.2, =8.0.3, =8.0.3, =8.0.3, =8.0.3, =5.0.2, =1.0.3.1-JDK21, =1.0.3.2-JDK21 and more Source cves: CVE-2020-11050 Source advisory: OSV:GHSA-GW55-JM4H-X339...

CVE-2020-11050

In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation. This has been patched in 1.5.0...

CVE-2020-11050 Improper Validation of Certificate with Host Mismatch in Java-WebSocket

In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation. This has been patched in 1.5.0...

CVE-2020-11050

The CVE-2020-11050 vulnerability affects Java-WebSocket