CVE-2025-66902

High · 7.5

CVSS

7.5

EPSS

0.4%

Published

Jan 20, 2026

CISA due date

—

The record

An input validation issue in in Pithikos websocket-server v.0.6.4 allows a remote attacker to obtain sensitive information or cause unexpected server behavior via the websocket_server/websocket_server.py, WebSocketServer._message_received components.

Affected packages

Ecosystem	Package	Introduced	Fixed