Faye Project Faye
2 CVEs affecting Faye Project Faye. Latest disclosed: 2020-07-31. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-11020 | High | 8.5 | 2020-04-29 | Faye (NPM, RubyGem) versions greater than 0.5.0 and before 1.0.4, 1.1.3 and 1.2.5, has the potential for authentication bypass in the extension system. The vul… |
CVE-2020-15134 | High | 8.0 | 2020-07-31 | Faye before version 1.4.0, there is a lack of certification validation in TLS handshakes. Faye uses em-http-request and faye-websocket in the Ruby version of i… |