Critical WebSocket Message Corruption Vulnerability in websocket-driver (CVE-2026-54466)
A critical vulnerability (CVE-2026-54466, CVSS 9.2) exists in the websocket-driver library, allowing for message corruption via abuse of protocol length headers. This issue affects versions < 0.7.5 and has been patched in version 0.7.5. Successful exploitation requires no authentication or user interaction and can lead to incorrect parsing of subsequent payloads. Immediate upgrade to version 0.7.5 is recommended.