Skip to content

[Security] ws 8.0.0 - 8.20.1 — GHSA-96hv-2xvq-fx4p #279

Description

@bitskc

Vulnerability: GHSA-96hv-2xvq-fx4p

Package: ws
Ecosystem: npm
Affected versions: 8.0.0 - 8.20.1
Severity: high
CVSS Score: 7.5

Description

ws: Memory exhaustion DoS from tiny fragments and data chunks

Advisory

GHSA-96hv-2xvq-fx4p

Fix Recommendation

A fix is available. Run npm audit fix to update affected dependencies, or manually update ws to the latest patched version.


This issue was automatically generated by a dependency vulnerability scan.

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions