CVE-2026-48779Published
ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vuln…
Exact source revision recorded 27 Oct 2026 13:11:53 UTC. It does not establish the source's current position. Latest evidence.
nvd · CVE-2026-48779
PublishedNo affected-package array is stated in this source revision. Check its state and earlier observations; this does not establish that every package is unaffected.