{"action":"Upgrade org.java-websocket:Java-WebSocket to 1.5.0 or later.","affected":[{"fixed":"1.5.0","introduced":"0"}],"component":"org.java-websocket:Java-WebSocket","cve_ids":["CVE-2020-11050"],"ecosystem":"Maven","epss":0.00791,"exploited":false,"fixed_versions":["1.5.0"],"ghsa_id":"GHSA-gw55-jm4h-x339","id":"tcs_01M5N8Z2R65HQ5EPCV4QREMSRQ","modified_at":"2026-09-10T03:48:47.350626091Z","published_at":"2020-05-08T18:54:39Z","references":["https://osv.dev/vulnerability/GHSA-gw55-jm4h-x339","https://github.com/TooTallNate/Java-WebSocket/security/advisories/GHSA-gw55-jm4h-x339","https://nvd.nist.gov/vuln/detail/CVE-2020-11050","https://github.com/TooTallNate/Java-WebSocket"],"severity":{"label":"critical","score":9},"sources":[{"source":"osv","source_id":"GHSA-gw55-jm4h-x339","url":"https://osv.dev/vulnerability/GHSA-gw55-jm4h-x339"}],"summary":"Improper Validation of Certificate with Host Mismatch in Java-WebSocket"}