Filtered by vendor Sockjs Project Subscriptions
Filtered by product Sockjs Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-7693 1 Sockjs Project 1 Sockjs 2024-09-17 5.3 Medium
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.
CVE-2020-8823 1 Sockjs Project 1 Sockjs 2024-08-04 6.1 Medium
htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka callback) parameter.