{"id":"CVE-2017-7192","details":"WebSocket.swift in Starscream before 2.0.4 allows an SSL Pinning bypass because of incorrect management of the certValidated variable (it can be set to true but cannot be set to false).","modified":"2026-05-17T11:54:31.034435267Z","published":"2017-04-06T14:59:00.363Z","database_specific":{},"references":[{"type":"WEB","url":"http://seclists.org/bugtraq/2017/Apr/66"},{"type":"ADVISORY","url":"https://github.com/daltoniam/Starscream/releases/tag/2.0.4"},{"type":"FIX","url":"https://github.com/daltoniam/Starscream/commit/dbeb1190b8dcbff4f0b797f9e9d9b9b864d1f0d6"}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N"}]}