Tag
high
advisory
Plaintext WebSocket Exposure in HTTPX2 and httpcore2 via SOCKS5 Proxy
2 TTPs 1 CVEA transport flaw in httpcore2 and httpx2 fails to establish TLS for wss:// connections routed through SOCKS5 proxies, exposing authentication headers, cookies, and message payloads in plaintext to proxy intermediaries.
httpcore2 +1
vulnerability
transport-security
proxy
2t
1c
medium
advisory
GnuTLS Denial of Service Vulnerability
1 TTP 1 CVEA vulnerability in the GnuTLS library allows remote, unauthenticated attackers to trigger a denial of service condition in applications leveraging the library via CVE-2024-0553.
GnuTLS +1
denial-of-service
vulnerability
transport-security
1t
1c