CVE-2026-61666 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, ruby4.0-rails, gitlab-rails-ce-fips, pghero-fips, pghero, gitlab-rails-ce, commercial-gitlab-rails-ee-fips...

SUSE CVE-2026-61666

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.2, WebSocket::Driver.server passes a malformed Host header to URI.parse in lib/websocket/http/request.rb without catching URI::InvalidURIError, allowing a remote client to crash a TCP-backed WebSocket server when th...