CVE-2026-110314

Client-Side Enforcement of Server-Side Security vulnerability in the WebSocket connection handling of mtrudel bandit allows a remote client to keep running WebSock handler code after the server has stopped its connection, via data frames sent after ignoring the server's Close frame. When a WebSoc...

CVE-2026-110314

The mtrudel bandit framework (versions 0.5.1 to before 1.14.0 ) is vulnerable to a Client-Side Enforcement of Server-Side Security issue in its WebSocket connection handling. When a WebSock callback returns {:stop, ...}, the Bandit.WebSocket.Connection component enters a :closing state, but the c...