TakahikoKawasaki/nv-websocket-client

Releases47

Frequency1 month 2 weeks

Last Release about 5 years ago

Stars2.05K

High-quality WebSocket client implementation in Java.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2017-1000209 ↗	Nov 17, 2017Friday, 17 November 2017, 02:29	—	4.3 MEDIUM
The Java WebSocket client nv-websocket-client does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL/TLS servers via an arbitrary valid certificate.