WS
Product
WS
5
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 1Low 0
Watch
Add WS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-48779 | 7.5 | Jun 16 | ws: Memory exhaustion DoS from tiny fragments and data chunks Affected: 1.1.0 before 5.2.5; 6.0.0 before 6.2.4; 7.0.0 before 7.5.11; 8.0.0 before 8.21.0 |
| CVE-2026-45736 | 7.5 | May 15 | ws: Uninitialized memory disclosure Affected: 8.0.0 before 8.20.1 |
| CVE-2016-10542 | 7.5 | May 31 | ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455" Affected: through 1.1.0 |
| CVE-2016-10518 | 7.5 | May 31 | A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by sending a ping frame Affected: before 1.0.1 |
Showing 4