All issues

Search results

# Security Audit Report: Java-WebSocket (TooTallNate)

Status: Open.

#1508In TooTallNate/Java-WebSocket;

· qrn12580 opened on Aug 2, 2026

[Security] Default maxFrameSize=Integer.MAX_VALUE -> declared-length pre-allocation -> OOM whole-server crash (Draft_6455.java:557)

Status: Open.

#1507In TooTallNate/Java-WebSocket;

· afldl opened on Aug 1, 2026

WebSocketServer SSL handshake gets stuck when client certificate is used

Status: Open.

#1500In TooTallNate/Java-WebSocket;

· robert-s-ubi opened on Jan 23, 2026

Unbounded default frame size allows DoS via memory exhaustion (OOM)

Status: Open.

#1499In TooTallNate/Java-WebSocket;

· TianmuTNT opened on Jan 3, 2026

WebSocketServer crashes when overridden methods throw Exceptions

Status: Open.

#1481In TooTallNate/Java-WebSocket;

· cvilsmeier opened on Jul 30, 2025

The blocking read on istream.read() can cause delays in reaching the onClose callback when a close command is issued externally

Status: Open.

#1478In TooTallNate/Java-WebSocket;

· adamscm opened on Jun 26, 2025

when http upgrade fail, the connection can not close success

Status: Open.

#1471In TooTallNate/Java-WebSocket;

· kevinhehc opened on May 20, 2025

Risk of race-condition when calling reconnect()

Status: Open.

#1470In TooTallNate/Java-WebSocket;

· oliviermartin opened on May 20, 2025

unhandled Throwable in WebSocketClient

Bug

Client

Status: Open.

#1460In TooTallNate/Java-WebSocket;

· kashiro68 opened on Feb 20, 2025

reconnectBlocking blocks the callback all the time

Status: Open.

#1456In TooTallNate/Java-WebSocket;

· Adiudiu opened on Feb 12, 2025

How to reduce thread consumption on client-side？

Status: Open.

#1455In TooTallNate/Java-WebSocket;

· crazyAttributor opened on Feb 6, 2025

Access HTTP response when handshake fails

Status: Open.

#1454In TooTallNate/Java-WebSocket;

· TheCardinalSystem opened on Feb 5, 2025