Lucene search
+L

11660 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/07/18 12:00 a.m.•9 views

CVE-2026-16119: Incorrect Authorization

A vulnerability was found in nextlevelbuilder GoClaw up to 3.13.2. This affects the function RequestApproval of the file internal/tools/execapproval.go of the component WebSocket Approval Endpoint. Performing a manipulation results in incorrect authorization. The attack is possible to be carried...

6.5CVSS6.1AI score0.00398EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/18 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-54465

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, when websocket-driver is used to implement a WebSocket server on top of a T...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/18 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-54490

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket...

6.3CVSS5.6AI score0.00445EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/18 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-54463

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.8.1, draft versions of the WebSocket protocol in websocket-driver include a leng...

7.5CVSS5.8AI score0.00488EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/18 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-54464

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Impact If this library is used in tandem with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than...

6.3CVSS5.8AI score0.00445EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/18 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-54466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a...

9.2CVSS5.5AI score0.0038EPSS
SaveExploits0References3
osv_debian
osv_debian
•added 2026/07/17 9:17 p.m.•25 views

DEBIAN-CVE-2026-54490

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size because the limit is checked...

6.3CVSS5.6AI score0.00445EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/17 9:17 p.m.•33 views

CVE-2026-54466

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitrarily large integer to be encoded as a sequence of bytes with the high bit set. By sending an indefinite...

9.2CVSS0.0038EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/17 9:17 p.m.•37 views

CVE-2026-54490

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size because the limit is checked...

6.3CVSS0.00445EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/07/17 9:17 p.m.•23 views

DEBIAN-CVE-2026-54466

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitrarily large integer to be encoded as a sequence of bytes with the high bit set. By sending an indefinite...

7.5CVSS5.4AI score0.0038EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/07/17 9:17 p.m.•45 views

CVE-2026-54490

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size because the limit is checked...

6.3CVSS5.5AI score0.00445EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/07/17 9:17 p.m.•42 views

CVE-2026-54466

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitrarily large integer to be encoded as a sequence of bytes with the high bit set. By sending an indefinite...

9.2CVSS5.4AI score0.0038EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2026/07/17 9:17 p.m.•25 views

UBUNTU-CVE-2026-54490

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size because the limit is checked...

6.3CVSS5.6AI score0.00445EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2026/07/17 9:17 p.m.•23 views

UBUNTU-CVE-2026-54466

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitrarily large integer to be encoded as a sequence of bytes with the high bit set. By sending an indefinite...

9.2CVSS5.4AI score0.0038EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/07/17 8:54 p.m.•30 views

EUVD-2026-45336

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size because the limit is checked...

6.3CVSS5.6AI score0.00445EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/17 8:54 p.m.•12 views

CVE-2026-54490 websocket-driver: Resource limit bypass via message compression

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size because the limit is checked...

6.3CVSS5.6AI score0.00445EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/07/17 8:54 p.m.•43 views

CVE-2026-54490

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size because the limit is checked...

6.3CVSS5.6AI score0.00445EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2026/07/17 8:54 p.m.•33 views

CVE-2026-54490

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size because the limit is checked...

6.3CVSS5.6AI score0.00445EPSS
SaveExploits0
Mend
Mend
•added 2026/07/17 8:54 p.m.•9 views

CVE-2026-54490

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size because the limit is checked...

6.3CVSS5.6AI score0.00445EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/07/17 8:54 p.m.•22 views

CVE-2026-54490 websocket-driver: Resource limit bypass via message compression

websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message size because the limit is checked...

6.3CVSS5.6AI score0.00445EPSS
SaveExploits0References4
Rows per page
Query Builder