Login Request a demo
FA
Product
Faye
by Faye Project · last CVE Jul 31, 2020
2
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 1High 1Medium 0Low 0
Severity
All severities2Critical1High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Faye to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-11020
9.8
2%
Apr 29
Faye (NPM, RubyGem) versions greater than 0.5.0 and before 1.0.4, 1.1.3 and 1.2.5, has the potential for authentication bypass in the extension system
Affected: after 0.5.0 before 1.0.4; after 0.5.0 before 1.0.4; 1.1.0 before 1.1.3; 1.1.0 before 1.1.3; 1.2.0 before 1.2.5; 1.2.0 before 1.2.5
CVE-2020-15134
8.7
1%
Jul 31
Faye before version 1.4.0, there is a lack of certification validation in TLS handshakes
Affected: before 1.4.0
Showing 2