Homepage

websocket-client@0.13.0 vulnerabilities

WebSocket client for Python with low level API options

  • latest version

    1.8.0

  • latest non vulnerable version

    1.8.0

  • first published

    14 years ago

  • latest version published

    8 months ago

  • licenses detected

  • View websocket-client package health on Snyk Advisor  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the websocket-client package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Insecure Randomness

    websocket_client is a WebSocket client for python.

    Affected versions of this package are vulnerable to Insecure Randomness due to the using the uuid.uuid4() function which can produce predictable values and should not be used in security-sensitive context.

    [,0.33.0)
    • M
    Timing Attack

    websocket-client is a WebSocket client for python.

    Affected versions of this package are vulnerable to Timing Attacks due to not comparing the HMAC hashes in constant time. A malicious user could guess the valid HMAC hash during the comparison time with an algorithm.

    [,0.33.0)
    Go back to all versions of this package