Product by Websockets

    Ws

    5 known vulnerabilities in Ws (Websockets), 0 of them actively exploited (CISA KEV).

    Key figures

    5

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Ws (Websockets)
    MediumCVE-2021-32640

    ReDoS in Sec-Websocket-Protocol header

    also in 3 other products

    5.3
    HighCVE-2026-48779

    ws: Memory exhaustion DoS from tiny fragments and data chunks

    also in 1 other product

    7.5
    HighCVE-2024-37890

    Denial of service when handling a request with many HTTP headers in ws

    7.5
    HighCVE-2026-45736

    ws: Uninitialized memory disclosure

    also in 3 other products

    7.5
    HighCVE-2026-62389

    ws < 8.21.1 Default maxFragments Allows Memory Exhaustion DoS

    7.5

    All products by Websockets