search

seanmonstar / warp

A super-easy, composable, web server framework for warp speeds.
https://seanmonstar.com/post/176530511587/warp
MIT License
9.53k stars 715 forks source link

CVE-2023-43669/GHSA-9mcr-873m-xcxp: tungstenite <= 0.20.0 DoS vulnerability #1066

Closed kpcyrd closed 1 year ago

kpcyrd commented 1 year ago

Hi!

I've noticed a security warning in one of my github repositories related to tungstenite:

https://github.com/snapview/tungstenite-rs/issues/376

This is due to warp depending on tokio-tungstenite 0.18.0, which in turn depends on tungstenite 0.18.0.

To fix this, the tokio-tungstenite dependency needs to be updated to 0.20.1.

kpcyrd commented 1 year ago

Thank you! ❤️