websockets

Products

ProductCVEsExploitedLatest
ws4–Jun 16, 2026

Exploited and recent CVEs

  • CVE-2026-48779 High 7.5 ws: Memory exhaustion DoS from tiny fragments and data chunks 1.4%
  • CVE-2026-45736 Medium 4.4 ws: Uninitialized memory disclosure 0.7%
  • CVE-2024-37890 High 7.5 Denial of service when handling a request with many HTTP headers in ws 1.4%
  • CVE-2021-32640 Medium 5.3 ReDoS in Sec-Websocket-Protocol header 2.8%