THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-48779 (HIGH 7.5) — ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume

[NVD] CVE-2026-48779 (HIGH 7.5) — ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume

lownvdPublished 2026-06-17

CVE-2026-48779 CVSS: 7.5 HIGH Published: 2026-06-17T13:20:42.887

ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, wit

Indicators of compromise

CVE-2026-48779cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-48779