https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T20:24:36.636500+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2023-43669 CVE-2023-43669 2026-10-23T20:24:36.673592+00:00

The Tungstenite crate before 0.20.1 for Rust allows remote attackers to cause a denial of service (minutes of CPU consumption) via an excessive length of an HTTP header in a client handshake. The length affects both how many times a parse is attempted (e.g., thousands of times) and the average amount of data for each parse attempt (e.g., millions of bytes).

 https://cve.radiocsirt.org/vuln/ghsa-9mcr-873m-xcxp GHSA-9mcr-873m-xcxp — Tungstenite allows remote attackers to cause a denial of service 2026-10-23T20:24:36.673641+00:00

Affected: crates.io: tungstenite

The Tungstenite crate through 0.20.0 for Rust allows remote attackers to cause a denial of service (minutes of CPU consumption) via an excessive length of an HTTP header in a client handshake. The length affects both how many times a parse is attempted (e.g., thousands of times) and the average amount of data for each parse attempt (e.g., millions of bytes).