Lucene search
+L

146 matches found

Github Security Blog
Github Security Blog
added 2 days ago11 views

AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate

Summary The client accepts and decompresses frames with the RSV1 bit set even when the permessage-deflate extension was not negotiated. Impact A client may unexpectedly decompress WebSocket frames when explicitly opted out. This could lead to additional CPU/memory consumption, but is unlikely to ...

6.9CVSS5.4AI score0.00302EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder