Skip to content

Known vulnerabilities in websockets ws

Is your version affected?

CVE Summary Score Published
CVE-2026-62389 ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment guard only triggers… 8.7 High Jul 15, 2026
CVE-2026-48779 ws is an open source WebSocket client and server for Node.js 7.5 High Jun 16, 2026
CVE-2026-45736 ws is an open source WebSocket client and server for Node.js 4.4 Medium May 15, 2026
CVE-2024-37890 ws is an open source WebSocket client and server for Node.js 7.5 High Jun 17, 2024
CVE-2021-32640 ws is an open source WebSocket client and server library for Node.js 5.3 Medium May 25, 2021