https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T13:02:50.911179+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-47892 EUVD-2026-47892 2026-10-17T13:02:50.915217+00:00 EUVD-2026-47892 https://cve.radiocsirt.org/vuln/fkie_cve-2020-35896 fkie_cve-2020-35896 2026-10-17T13:02:50.915254+00:00

An issue was discovered in the ws crate through 2020-09-25 for Rust. The outgoing buffer is not properly limited, leading to a remote memory-consumption attack.

 https://cve.radiocsirt.org/vuln/ghsa-rh7x-ppxx-p34c GHSA-rh7x-ppxx-p34c — Insufficient size checks in ws 2026-10-17T13:02:50.915285+00:00

Affected: crates.io: ws

An issue was discovered in the ws crate through 2020-09-25 for Rust. The outgoing buffer is not properly limited, leading to a remote memory-consumption attack.

 https://cve.radiocsirt.org/vuln/gsd-2020-35896 gsd-2020-35896 2026-10-17T13:02:50.915309+00:00 gsd-2020-35896 https://cve.radiocsirt.org/vuln/rustsec-2020-0043 RUSTSEC-2020-0043 — Insufficient size checks in outgoing buffer in ws allows remote attacker to run the process out of memory 2026-10-17T13:02:50.915321+00:00

Affected: crates.io: ws

Affected versions of this crate did not properly check and cap the growth of the outgoing buffer.

This allows a remote attacker to take down the process by growing the buffer of their (single) connection until the process runs out of memory it can allocate and is killed.

The flaw was corrected in the [`parity-ws` fork](https://crates.io/crates/parity-ws) (>=0.10.0) by [disconnecting a client when the buffer runs full](https://github.com/housleyjk/ws-rs/pull/328).