security.nuyts.tech
CVE-2020-15133 – NuytsTech Security
In faye-websocket before version 0.11.0, there is a lack of certification validation in TLS handshakes. The `Faye::WebSocket::Client` class uses the `EM::Connec