Skip to content
OpenAdvisories

Package · Ubuntu

node-websocket-driver

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.3
    CVE-2026-54490

    websocket-driver: Resource limit bypass via message compression

    websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, if this library is used with the permessage-deflate extension, a WebSocket server or client can be made to accept messages that are larger than the configured maximum message…

    faye websocket-driver-node node-websocket-driver websocket-driver Debian Ubuntu npm
  • Critical 9.2
    CVE-2026-54466

    websocket-driver: Message corruption via abuse of protocol length headers

    websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitrarily large integer to be encoded as a sequence of bytes with the h…

    faye websocket-driver-node websocket-driver node-websocket-driver Debian Ubuntu npm