| Package | Affected versions | Patched versions |
|---|---|---|
| starscream | ≤ 2.0.3 |
WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because pinning occurs in the stream function (this is too late; pinning should occur in the initStreamsWithData function).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free