Websockets Project Websockets — known CVE vulnerabilities

Every CVE whose affected-product data names Websockets Project Websockets, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2018-1000518 — CVSS 7.5 (high): aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in…
• CVE-2021-33880 — CVSS 5.9 (medium): The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is…