PYSEC-2018-79
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/websockets/PYSEC-2018-79.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2018-79
- Aliases
- Published
- 2018-06-26T16:29:00Z
- Modified
- 2023-11-01T04:48:37.349335Z
- Summary
- [none]
- Details
-
aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in 5.
- References
Affected packages
PyPI / websockets
Package
- Name
- websockets
- View open source insights on deps.dev
- Purl
- pkg:pypi/websockets