Skip to content

[GHSA-73jw-fp74-p77x] ws before 8.21.1 contains a memory exhaustion...#8789

Open
lpinca wants to merge 1 commit into
lpinca/advisory-improvement-8789from
lpinca-GHSA-73jw-fp74-p77x
Open

[GHSA-73jw-fp74-p77x] ws before 8.21.1 contains a memory exhaustion...#8789
lpinca wants to merge 1 commit into
lpinca/advisory-improvement-8789from
lpinca-GHSA-73jw-fp74-p77x

Conversation

@lpinca

@lpinca lpinca commented Jul 23, 2026

Copy link
Copy Markdown

Updates

  • Affected products
  • CVSS v4
  • CWEs
  • Description
  • References
  • Source code location
  • Summary

Comments
The reporter requested a CVE even though the vulnerability is unconfirmed, see websockets/ws#2331 (comment).

@github-actions
github-actions Bot changed the base branch from main to lpinca/advisory-improvement-8789 July 23, 2026 13:20
@lpinca

lpinca commented Jul 23, 2026

Copy link
Copy Markdown
Author

The affected versions are

>= 1.1.0 < 5.2.6,
>= 6.0.0 < 6.2.5,
>= 7.0.0 < 7.5.12,
>= 8.0.0 < 8.21.1

I was not able to update them in the web form.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant