Websocket Extensions Project

websocket-extensions_project

2 CVEs • 1 product

Products (1)

Click to collapse

Toggle

Websocket Extensions

websocket-extensions

2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-7663 3Canonical DebianWebsocket Extensions Project 3Debian Linux Ubuntu LinuxWebsocket Extensions Jun 17, 2026 Jun 2, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 websocket-extensions ruby module prior to 0.1.5 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whos...Show more websocket-extensions ruby module prior to 0.1.5 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other character. This could be abused by an attacker to conduct Regex Denial Of Service (ReDoS) on a single-threaded server by providing a malicious payload with the Sec-WebSocket-Extensions header.Show less
CVE-2020-7662 1Websocket Extensions Project 1Websocket Extensions Jun 17, 2026 Jun 2, 2020 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 websocket-extensions npm module prior to 0.1.4 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose...Show more websocket-extensions npm module prior to 0.1.4 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other character. This could be abused by an attacker to conduct Regex Denial Of Service (ReDoS) on a single-threaded server by providing a malicious payload with the Sec-WebSocket-Extensions header.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2020-7663

3Canonical

DebianWebsocket Extensions Project

3Debian Linux

Ubuntu LinuxWebsocket Extensions

Jun 17, 2026

Jun 2, 2020

N/A· v4

7.5 HIGH· v3

5.0 MEDIUM· v2

websocket-extensions ruby module prior to 0.1.5 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other character. This could be abused by an attacker to conduct Regex Denial Of Service (ReDoS) on a single-threaded server by providing a malicious payload with the Sec-WebSocket-Extensions header.Show less

CVE-2020-7662

1Websocket Extensions Project

1Websocket Extensions

Jun 17, 2026

Jun 2, 2020

N/A· v4

7.5 HIGH· v3

5.0 MEDIUM· v2

websocket-extensions npm module prior to 0.1.4 allows Denial of Service (DoS) via Regex Backtracking. The extension parser may take quadratic time when parsing a header containing an unclosed string parameter value whose content is a repeating two-byte sequence of a backslash and some other character. This could be abused by an attacker to conduct Regex Denial Of Service (ReDoS) on a single-threaded server by providing a malicious payload with the Sec-WebSocket-Extensions header.Show less