Debian/ruby-faye-websocket: high 8.7
In faye-websocket before version 0.11.0, there is a lack of certification validation in TLS handshakes. The `Faye::WebSocket::Client` class uses the `EM::Connection#start_tls` method in EventMachine t
Action: Upgrade ruby-faye-websocket to 0.11.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.0-1 | - |
Fixed versions
| 0.11.0-1 |
Sources
published · modified · JSON