websockets
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ws | 4 | – | Jun 16, 2026 |
Exploited and recent CVEs
- CVE-2026-48779 ws: Memory exhaustion DoS from tiny fragments and data chunks 1.4%
- CVE-2026-45736 ws: Uninitialized memory disclosure 0.7%
- CVE-2024-37890 Denial of service when handling a request with many HTTP headers in ws 1.4%
- CVE-2021-32640 ReDoS in Sec-Websocket-Protocol header 2.8%