Lucene search
+L

1 matches found

OSV
OSV
added 2020/07/31 5:39 p.m.76 views

GHSA-3Q49-H8F9-9FR9 Missing TLS certificate verification

Faye uses em-http-request6 and faye-websocket10 in the Ruby version of its client. Those libraries both use the EM::Connectionstarttls1 method in EventMachine2 to implement the TLS handshake whenever a wss: URL is used for the connection. This method does not implement certificate verification by...

8CVSS8.4AI score0.00864EPSS
SaveExploits1References14
Rows per page
Query Builder