Log in Start free

faye

Products

ProductCVEsExploitedLatest
websocket-driver-ruby4–Aug 17, 2026
Faye2–Jul 31, 2020
websocket-driver-node2–Jul 17, 2026
faye-websocket1–Jul 31, 2020

Exploited and recent CVEs

  • CVE-2026-61666 High 8.9 websocket-driver: Denial of service via malformed Host header 0.4%
  • CVE-2026-54490 Medium 6.3 websocket-driver: Resource limit bypass via message compression 0.4%
  • CVE-2026-54466 Critical 9.2 websocket-driver: Message corruption via abuse of protocol length headers 0.4%
  • CVE-2026-54465 Medium 6.3 websocket-driver: Memory exhaustion in HTTP header parser 0.5%
  • CVE-2026-54463 Medium 6.9 websocket-driver: Memory exhaustion via abuse of protocol length headers 0.5%
  • CVE-2026-54464 Medium 6.3 websocket-driver: Resource limit bypass via message compression 0.4%
  • CVE-2020-15133 High 8.0 Missing TLS certificate verification in Faye Websocket 0.9%
  • CVE-2020-15134 High 8.0 Missing TLS certificate verification in Faye 0.9%
  • CVE-2020-11020 High 8.5 Authentication and extension bypass in Faye 1.6%