facebookincubator / SocketRocket

A conforming Objective-C WebSocket client library.
Other
9.53k stars 2.01k forks source link

Security issues #682

Open juan-utility opened 3 weeks ago

juan-utility commented 3 weeks ago

During our penetration test, we identified some security concerns, including the utilization of banned APIs (specifically the memcpy function) in SRSIMDHelpers.m and the use of a weak hash SHA1 in SRHash.m.

We kindly request your attention to address these matters.