CVE-2026-61666 vulnerabilities

Vulnerabilities for packages: pghero, ruby4.0-rails, gitlab-rails-ce, gitlab-rails-ce-fips, pghero-fips, commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips...

SUSE CVE-2026-61666

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when th...