CVE-2020-11050: Java-Websocket Project Java-Websocket

High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days.

In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation. This has been patched in 1.5.0.

Affected products

• Java-Websocket Project Java-Websocket: up to and including 1.4.1

Published 2020-05-07. Last modified 2026-06-17.