CVE-2018-1000518
2 advisories.
PyPI/websockets CVE-2018-1000518: high 7.5, EPSS 1.83%
websockets is vulnerable to denial of service by memory exhaustion
Action: Upgrade websockets to 5.0 or later.
pip install websockets==5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0 | 5.0 | - |
Fixed versions
| 5.0 |
Sources
- osv: GHSA-6g87-ff9q-v847
- https://nvd.nist.gov/vuln/detail/CVE-2018-1000518
- https://github.com/aaugustin/websockets/pull/407
- https://github.com/aaugustin/websockets
- https://github.com/pypa/advisory-database/tree/main/vulns/websockets/PYSEC-2018-79.yaml
CVE-2018-1000518 · published · modified · JSON
PyPI/websockets CVE-2018-1000518: unknown, EPSS 1.83%
aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that c
Action: Upgrade websockets to 5.0 or later.
pip install websockets==5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0 | - |
Fixed versions
| 5.0 |
Sources
- osv: PYSEC-2018-79
- https://github.com/aaugustin/websockets/pull/407
- https://github.com/advisories/GHSA-6g87-ff9q-v847
CVE-2018-1000518 · published · modified · JSON