wslink@0.1.9 vulnerabilities

Python/JavaScript library for communicating over WebSocket

  • latest version

    2.4.0

  • latest non vulnerable version

  • first published

    8 years ago

  • latest version published

    25 days ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the wslink package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Authentication Bypass

    wslink is a Python/JavaScript library for communicating over WebSocket

    Affected versions of this package are vulnerable to Authentication Bypass due to insufficient checks when using _valid_token attribute.

    How to fix Authentication Bypass?

    Upgrade wslink to version 1.8.3 or higher.

    [,1.8.3)
    • H
    Authentication Bypass

    wslink is a Python/JavaScript library for communicating over WebSocket

    Affected versions of this package are vulnerable to Authentication Bypass by not blocking further actions if an invalid token is sent.

    How to fix Authentication Bypass?

    Upgrade wslink to version 1.5.3 or higher.

    [,1.5.3)