CVE-2026-90584: TooTallNate Java-WebSocket Fragmentation Draft_6455.java processFrameContinuousAndNonFin allocation of resources
A weakness has been identified in TooTallNate Java-WebSocket up to 1.6.1. The impacted element is the function processFrameContinuousAndNonFin of the file Draft6455.java of the component Fragmentation Handler. Executing a manipulation can lead to allocation of resources. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. The pull request to fix this issue awaits acceptance.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
A remote attacker can exploit it without requiring privileges or user interaction, according to the supplied vector. The affected attack surface is the Java-WebSocket fragmentation handler.
What is the likely impact of exploitation?
The stated impact is allocation of resources, with availability rated as low impact. The supplied vector indicates no confidentiality or integrity impact.
Are fixed releases available?
The affected range is stated as Java-WebSocket up to 1.6.1. A pull request exists but is awaiting acceptance, so the provided data does not identify an available fixed release.
How urgent is mitigation?
Public exploit availability is reported, and the attack is remote with low complexity. Prioritize systems that expose Java-WebSocket services to untrusted network clients.