Skip to content
Threat Feed
Subscribe

Product

Websocket-Driver (< 0.8.2)

1 brief RSS
medium advisory

Denial of Service in websocket-driver-ruby via Malformed Host Header (CVE-2026-61666)

A denial of service vulnerability (CVE-2026-61666) exists in the websocket-driver-ruby library when used to implement a WebSocket server via `WebSocket::Driver.server()`, allowing a remote attacker to send a malformed `Host` header causing a `URI::InvalidURIError` exception and subsequent server process crash if unhandled.

websocket-driver denial-of-service vulnerability ruby webserver
1r 1t