https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T02:12:54.693223+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-184976 EUVD-2026-184976 2026-10-03T02:12:54.696447+00:00 EUVD-2026-184976 https://cve.radiocsirt.org/vuln/fkie_cve-2016-10542 fkie_cve-2016-10542 2026-10-03T02:12:54.696480+00:00

ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a `ws` server, it is possible to crash the node process. This affects ws 1.1.0 and earlier.

 https://cve.radiocsirt.org/vuln/ghsa-6663-c963-2gqg GHSA-6663-c963-2gqg — DoS due to excessively large websocket message in ws 2026-10-03T02:12:54.696511+00:00

Affected: npm: ws

Affected versions of `ws` do not appropriately limit the size of incoming websocket payloads, which may result in a denial of service condition when the node process crashes after receiving a large payload.

## Recommendation

Update to version 1.1.1 or later. Alternatively, set the `maxpayload` option for the `ws` server to a value smaller than 256MB.

 https://cve.radiocsirt.org/vuln/gsd-2016-10542 gsd-2016-10542 2026-10-03T02:12:54.696537+00:00 gsd-2016-10542 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-10542 UBUNTU-CVE-2016-10542 2026-10-03T02:12:54.696549+00:00

Affected: Ubuntu:16.04:LTS: node-ws, Ubuntu:18.04:LTS: node-ws

ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a `ws` server, it is possible to crash the node process. This affects ws 1.1.0 and earlier.