faye vulnerabilities
9 published CVEs name faye among the affected products.
- 9Published CVEs9 of them scored
- 6Last 12 monthspublished in the last year
- 1Critical4 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-61666
websocket-driver: Denial of service via malformed Host header
faye · websocket-driver-ruby
High8.9 - CVE-2026-54490
websocket-driver: Resource limit bypass via message compression
faye · websocket-driver-node
Medium6.3 - CVE-2026-54466
websocket-driver: Message corruption via abuse of protocol length headers
faye · websocket-driver-node
Critical9.2 - CVE-2026-54465
websocket-driver: Memory exhaustion in HTTP header parser
faye · websocket-driver-ruby
Medium6.3 - CVE-2026-54463
websocket-driver: Memory exhaustion via abuse of protocol length headers
faye · websocket-driver-ruby
Medium6.9 - CVE-2026-54464
websocket-driver: Resource limit bypass via message compression
faye · websocket-driver-ruby
Medium6.3 - CVE-2020-15133
Missing TLS certificate verification in Faye Websocket
faye · faye-websocket
High8.0 - CVE-2020-15134
Missing TLS certificate verification in Faye
faye · faye
High8.0 - CVE-2020-11020
Authentication and extension bypass in Faye
faye · Faye
High8.5