GCVE - cpe:2.3:a:starscream_project:starscream:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:starscream_project:starscream:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Starscream Project (`b873f6df-f469-5cd0-9d28-f87c9a283400`)
Product	Starscream (`2e889648-3679-5e53-8803-222bbd37de03`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL	Source	Last updated
`pkg:github/daltoniam/starscream`	purl2cpe	2026-06-01 10:16:02.653503
`pkg:sourceforge/starscream.mirror`	purl2cpe	2026-06-01 10:16:02.653506

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-7192`	vulnerable	2026-06-08 05:09:55.443783	Details available WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true but cannot be set to false). Published: 2017-04-06T14:00:00.000Z Updated: 2024-08-05T15:56:36.123Z Open on db.gcve.eu Reference links https://github.com/daltoniam/Starscream/releases/tag/2.0.4 https://github.com/daltoniam/Starscream/commit/dbeb1190b8dcbff4f0b797f9e9d9b9b864d1f0d6 http://seclists.org/bugtraq/2017/Apr/66	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-5887`	vulnerable	2026-06-08 05:09:50.060173	Details available WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because pinning occurs in the stream function (this is too late; pinning should occur in the initStreamsWithData function). Published: 2017-04-06T14:00:00.000Z Updated: 2024-08-05T15:11:48.884Z Open on db.gcve.eu Reference links http://seclists.org/bugtraq/2017/Apr/67 https://github.com/daltoniam/Starscream/releases/tag/2.0.4 https://github.com/daltoniam/Starscream/commit/dbeb1190b8dcbff4f0b797f9e9d9b9b864d1f0d6	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.