Skip to content
OpenAdvisories

Product · HackerOne

uws node module

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High —

    Denial of Service in uws

    uws is a WebSocket server library. By sending a 256mb websocket message to a uws server instance with permessage-deflate enabled, there is a possibility used compression will shrink said 256mb down to less than 16mb of websocket payload which passes the lengt…