Debian/ruby-faye-websocket: high 8.7
In faye-websocket before version 0.11.0, there is a lack of certification validation in TLS handshakes. The `Faye::WebSocket::Client` class uses the `EM::Connection#start_tls` method in EventMachine t
Action: Upgrade ruby-faye-websocket to 0.11.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.11.0-1 | - |
Fixed versions
| 0.11.0-1 |
Sources
- osv: DEBIAN-CVE-2020-15133#Debian:13/ruby-faye-websocket
- https://security-tracker.debian.org/tracker/CVE-2020-15133
published · modified · JSON