TooTallNate/Java-WebSocket

TooTallNate/Java-WebSocket

Releases33
Frequency5 months 1 week
Last Release
Stars10.8K
A barebones WebSocket client and server implementation written in 100% Java.

CVE History

CVEPublishedCVSS v3CVSS v2
9 CRITICAL6.8 MEDIUM

In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation. This has been patched in 1.5.0.