org.java-websocket/Java-WebSocket vulnerabilities

Latest org.java-websocket/Java-WebSocket CVEs

Newest publication first

1. CVE-2020-11050 Improper Validation of Certificate with Host Mismatch in Java-WebSocket

   Published 2020-05-07

   High·CVSS 8.1 EPSS 0.79%

   In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation. This has been patched in 1.5.0.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.