Skip to content
OpenAdvisories

Package · Debian

node-websocket-driver

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.2
    CVE-2026-54466

    websocket-driver: Message corruption via abuse of protocol length headers

    websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitrarily large integer to be encoded as a sequence of bytes with the h…

    faye websocket-driver-node node-websocket-driver websocket-driver Debian Ubuntu npm