faye vulnerabilities

Simple pub/sub messaging for the web

  • latest version

    1.4.1

  • latest non vulnerable version

  • first published

    14 years ago

  • latest version published

    3 months ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the faye package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Improper Certificate Validation

    <1.4.0
    • H
    Improper Access Control

    <1.0.4>=1.1.0 <1.1.3>=1.2.0 <1.2.5
    • H
    Cross-Site Request Forgery (CSRF)

    <1.1.0
    • M
    Insecure Defaults

    >=0.5.0 <0.8.9

    Package versions

    45 VERSIONS IN TOTAL
    versionpublisheddirect vulnerabilities
    1.4.117 Jun, 2025
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    1.4.031 Jul, 2020
    • 0
      C
    • 0
      H
    • 0
      M
    • 0
      L
    1.3.08 Jun, 2020
    • 0
      C
    • 1
      H
    • 0
      M
    • 0
      L
    1.2.528 Apr, 2020
    • 0
      C
    • 1
      H
    • 0
      M
    • 0
      L
    1.2.428 Jan, 2017
    • 0
      C
    • 2
      H
    • 0
      M
    • 0
      L
    1.2.311 Oct, 2016
    • 0
      C
    • 2
      H
    • 0
      M
    • 0
      L
    1.2.218 Jul, 2016
    • 0
      C
    • 2
      H
    • 0
      M
    • 0
      L
    1.2.129 Jun, 2016
    • 0
      C
    • 2
      H
    • 0
      M
    • 0
      L
    1.2.026 Jun, 2016
    • 0
      C
    • 2
      H
    • 0
      M
    • 0
      L
    1.1.328 Apr, 2020
    • 0
      C
    • 1
      H
    • 0
      M
    • 0
      L