facebook/wangle

facebook/wangle

Releases501
Frequency1 week 1 day
Last Release
Stars3.1K
Wangle is a framework providing a set of common client/server abstractions for building services in a consistent, modular, and composable way.

CVE History

CVEPublishedCVSS v3CVSS v2
9.8 CRITICAL7.5 HIGH

Wangle's LineBasedFrameDecoder contains logic for identifying newlines which incorrectly advances a buffer, leading to a potential underflow. This affects versions of Wangle prior to v2019.04.22.00

4.3 MEDIUM

Wangle's AcceptRoutingHandler incorrectly casts a socket when accepting a TLS 1.3 connection, leading to a potential denial of service attack against systems accepting such connections. This affects versions of Wangle prior to v2019.01.14.00