VYPR

Java Websocket

by Java Websocket Project

CVEs (1)

  • CVE-2020-11050CriMay 7, 2020
    risk 0.59cvss 9.0epss 0.01

    In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation. This has been patched in 1.5.0.