Approved changes feed: RSS · Atom

cpe:2.3:a:tootallnate:java-websocket:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTootallnate (20527d51-0d46-5c96-a3ab-8087e6caf6bd)
ProductJava Websocket (fe7bd144-5aa0-5d12-84c7-ce5708261463)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-90584 vulnerable 2026-09-16 04:33:05.515291 TooTallNate Java-WebSocket Fragmentation Draft_6455.java processFrameContinuousAndNonFin allocation of resources
MEDIUM (5.3)
A weakness has been identified in TooTallNate Java-WebSocket up to 1.6.1. The impacted element is the function processFrameContinuousAndNonFin of the file Draft_6455.java of the component Fragmentation Handler. Executing a manipulation can lead to allocation of resources. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.
Published: 2026-09-13T20:15:07.686Z
Updated: 2026-09-14T17:00:11.964Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11050 vulnerable 2026-06-08 05:16:36.359506 Improper Validation of Certificate with Host Mismatch in Java-WebSocket
CRITICAL (9)
In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation. This has been patched in 1.5.0.
Published: 2020-05-07T20:15:12.000Z
Updated: 2024-08-04T11:21:14.437Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.