https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 18:53:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-239367 EUVD-2026-239367 https://cve.radiocsirt.org/vuln/euvd-2026-239367 https://cve.radiocsirt.org/vuln/fkie_cve-2025-43855 <p>tRPC allows users to build &amp; consume fully typesafe APIs without schemas or code generation. In versions starting from 11.0.0 to before 11.1.1, an unhandled error is thrown when validating invalid connectionParams which crashes a tRPC WebSocket server. This allows any unauthenticated user to crash a tRPC 11 WebSocket server. Any tRPC 11 server with WebSocket enabled with a createContext method set is vulnerable. This issue has been patched in version 11.1.1.</p> <p>tRPC allows users to build &amp; consume fully typesafe APIs without schemas or code generation. In versions starting from 11.0.0 to before 11.1.1, an unhandled error is thrown when validating invalid connectionParams which crashes a tRPC WebSocket server. This allows any unauthenticated user to crash a tRPC 11 WebSocket server. Any tRPC 11 server with WebSocket enabled with a createContext method set is vulnerable. This issue has been patched in version 11.1.1.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-43855 https://cve.radiocsirt.org/vuln/ghsa-pj3v-9cm8-gvj8 <p><strong>Affected:</strong> npm: @trpc/server</p> <p>### Summary</p> <p>An unhandled error is thrown when validating invalid connectionParams which crashes a tRPC WebSocket server. This allows any unauthenticated user to crash a tRPC 11 WebSocket server.</p> <p>### Details Any tRPC 11 server with WebSocket enabled with a `createContext` method set is vulnerable. Here is an example:</p> <p>https://github.com/user-attachments/assets/ce1b2d32-6103-4e54-8446-51535b293b05</p> <p>I have a working reproduction here if you would like to test: https://github.com/lukechilds/trpc-vuln-reproduction</p> <p>The connectionParams logic introduced in https://github.com/trpc/trpc/pull/5839 does not safely handle invalid connectionParams objects. During validation if the object does not match an expected shape an error will be thrown:</p> <p>https://github.com/trpc/trpc/blob/8cef54eaf95d8abc8484fe1d454b6620eeb57f2f/packages/server/src/unstable-core-do-not-import/http/parseConnectionParams.ts#L27-L33</p> <p>This is called during WebSocket connection setup inside `createCtxPromise()` here:</p> <p>https://github.com/trpc/trpc/blob/8cef54eaf95d8abc8484fe1d454b6620eeb57f2f/packages/server/src/adapters/ws.ts#L435</p> <p>`createCtxPromise` has handling to catch any errors and pass them up to the `opts.onError` handler:</p> <p>https://github.com/trpc/trpc/blob/8cef54eaf95d8abc8484fe1d454b6620eeb57f2f/packages/server/src/adapters/ws.ts#L144-L173</p> <p>However the error handler then rethrows the error:</p> <p>https://github.com/trpc/trpc/blob/8cef54eaf95d8abc8484fe1d454b6620eeb57f2f/packages/server/src/adapters/ws.ts#L171</p> <p>S…</p> <p><strong>Affected:</strong> npm: @trpc/server</p> <p>### Summary</p> <p>An unhandled error is thrown when validating invalid connectionParams which crashes a tRPC WebSocket server. This allows any unauthenticated user to crash a tRPC 11 WebSocket server.</p> <p>### Details Any tRPC 11 server with WebSocket enabled with a `createContext` method set is vulnerable. Here is an example:</p> <p>https://github.com/user-attachments/assets/ce1b2d32-6103-4e54-8446-51535b293b05</p> <p>I have a working reproduction here if you would like to test: https://github.com/lukechilds/trpc-vuln-reproduction</p> <p>The connectionParams logic introduced in https://github.com/trpc/trpc/pull/5839 does not safely handle invalid connectionParams objects. During validation if the object does not match an expected shape an error will be thrown:</p> <p>https://github.com/trpc/trpc/blob/8cef54eaf95d8abc8484fe1d454b6620eeb57f2f/packages/server/src/unstable-core-do-not-import/http/parseConnectionParams.ts#L27-L33</p> <p>This is called during WebSocket connection setup inside `createCtxPromise()` here:</p> <p>https://github.com/trpc/trpc/blob/8cef54eaf95d8abc8484fe1d454b6620eeb57f2f/packages/server/src/adapters/ws.ts#L435</p> <p>`createCtxPromise` has handling to catch any errors and pass them up to the `opts.onError` handler:</p> <p>https://github.com/trpc/trpc/blob/8cef54eaf95d8abc8484fe1d454b6620eeb57f2f/packages/server/src/adapters/ws.ts#L144-L173</p> <p>However the error handler then rethrows the error:</p> <p>https://github.com/trpc/trpc/blob/8cef54eaf95d8abc8484fe1d454b6620eeb57f2f/packages/server/src/adapters/ws.ts#L171</p> <p>S…</p> https://cve.radiocsirt.org/vuln/ghsa-pj3v-9cm8-gvj8