Faye vulnerabilities

Products

• Websocket-driver-ruby 4
• Websocket-driver 3
• Faye 2
• Websocket-driver-node 2

Newest

• faye websocket-driver-ruby websocket-driver: Denial of service via malformed Host header CVE-2026-61666 Fix available 8.9 HighJuly 21, 2026
• faye websocket-driver-node websocket-driver: Resource limit bypass via message compression CVE-2026-54490 Fix available 6.3 MediumJuly 15, 2026
• faye websocket-driver, websocket-driver-node +1 more websocket-driver: Message corruption via abuse of protocol length headers CVE-2026-54466 Fix available 9.2 CriticalJuly 15, 2026
• faye websocket-driver, websocket-driver-ruby +1 more websocket-driver: Memory exhaustion in HTTP header parser CVE-2026-54465 Fix available 6.3 MediumJuly 15, 2026
• faye websocket-driver-ruby websocket-driver: Resource limit bypass via message compression CVE-2026-54464 Fix available 6.3 MediumJuly 15, 2026
• faye websocket-driver, websocket-driver-ruby +1 more websocket-driver: Memory exhaustion via abuse of protocol length headers CVE-2026-54463 Fix available 6.9 MediumJuly 15, 2026
• faye faye-websocket Missing TLS certificate verification in Faye Websocket CVE-2020-15133 Fix available 8.0 HighJuly 31, 2020
• faye Missing TLS certificate verification in Faye CVE-2020-15134 Fix available 8.0 HighJuly 31, 2020
• faye Authentication and extension bypass in Faye CVE-2020-11020 Fix available 8.5 HighApril 29, 2020