Rivka Segan

RFC 6455 4.2.1.5 says WebSocket servers are supposed to stop processing a client's handshake if the Sec-WebSocket-Key header doesn't have 16 bytes after decoding. It's one of the 4.2.1 "client...

no lower bound is 0 not *

1

You have around 1000 files with "version": "*" exactly 7 lines after a CPE like: https://github.com/cisagov/vulnrichment/blob/c31752fa4a9da78d1b6af62037ea7112a6b7d584/2024/36xxx/CVE-2024-36076.json#L90-L97 but I think you meant 0 (I guess for all 1000) because * means...