Skip to content
Threat Feed

Tag

Granian

1 brief RSS
medium advisory

Granian WebSocket Subprotocol Header Denial of Service

Granian versions 1.2.0 through 2.7.3 are vulnerable to an unauthenticated denial of service. Sending a WebSocket upgrade request with a `Sec-WebSocket-Protocol` header containing non-ASCII bytes causes a worker process to abort, leading to a denial of service.

granian denial-of-service websocket
2r 1t