facebook/wangle

facebook/wangle

Releases509
Frequency1 week 1 day
Last Release
Stars3.1K
Wangle is a framework providing a set of common client/server abstractions for building services in a consistent, modular, and composable way.

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
< 2019.04.22.009.8 CRITICAL7.5 HIGH

Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances a buffer, leading to a potential underflow. This affects versions of Wangle prior to v2019.04.22.00

< 2019.01.14.004.3 MEDIUM

Wangle's AcceptRoutingHandler incorrectly casts a socket when accepting a TLS 1.3 connection, leading to a potential denial of service attack against systems accepting such connections. This affects versions of Wangle prior to v2019.01.14.00