Most recent entries from all

EUVD-2026-184976

fkie_cve-2016-10542

ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455". By sending an overly long websocket payload to a `ws` server, it is possible to crash the node process. This affects ws 1.1.0 and earlier.

GHSA-6663-c963-2gqg — DoS due to excessively large websocket message in ws

Affected: npm: ws

Affected versions of `ws` do not appropriately limit the size of incoming websocket payloads, which may result in a denial of service condition when the node process crashes after receiving a large payload.

## Recommendation

Update to version 1.1.1 or later. Alternatively, set the `maxpayload` option for the `ws` server to a value smaller than 256MB.

gsd-2016-10542

UBUNTU-CVE-2016-10542

Affected: Ubuntu:16.04:LTS: node-ws, Ubuntu:18.04:LTS: node-ws