Filtered by vendor Starscream Project Subscriptions
Filtered by product Starscream Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2017-5887 1 Starscream Project 1 Starscream 2017-04-26 N/A
WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because pinning occurs in the stream function (this is too late; pinning should occur in the initStreamsWithData function).
CVE-2017-7192 1 Starscream Project 1 Starscream 2017-04-25 N/A
WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true but cannot be set to false).