CVE-2026-90584 | TooTallNate Java-WebSocket up to 1.6.1 Fragmentation Draft_6455.java processFrameContinuousAndNonFin allocation of resources (Issue 1508)

September 12, 2026 Yanac

A vulnerability labeled as problematic has been found in TooTallNate Java-WebSocket up to 1.6.1. The impacted element is the function processFrameContinuousAndNonFin of the file Draft_6455.java of the component Fragmentation Handler. Executing a manipulation can lead to allocation of resources.

This vulnerability appears as CVE-2026-90584. The attack may be performed from remote. In addition, an exploit is available.

The pull request to fix this issue awaits acceptance.VulDB Recent EntriesRead More