Websockets Project Websockets 2.5 for Python

CPE Details

Websockets Project Websockets 2.5 for Python
2.5
2022-02-09
13h50 +00:00
2022-02-09
13h50 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:websockets_project:websockets:2.5:*:*:*:*:python:*:*

Informations

Vendor

websockets_project

Product

websockets

Version

2.5

Target Software

python

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-33880 2021-06-06 12h05 +00:00 The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...). An attacker may be able to guess a password via a timing attack.
5.9
Medium