websockets

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

websockets records in CISA KEV

No websockets vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records

TI-2026-36049 CVE-2026-48779 · GHSA-96hv-2xvq-fx4p

HIGH 72

ws is an open source WebSocket client and server for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01426 Published 2026-06-16 Partial fix · 5.2.5, 6.2.4 +2 CWE-400

TI-2024-25207 CVE-2024-37890 · GHSA-3h5v-q93c-6h6q

HIGH 72

ws is an open source WebSocket client and server for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01357 Published 2024-06-17 Partial fix · 5.2.4, 6.2.3 +2 CWE-476

TI-2026-33473 CVE-2026-45736 · GHSA-58qx-3vcg-4xpx

HIGH 66

ws is an open source WebSocket client and server for Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00745 Published 2026-05-15 Partial fix · 8.20.1 CWE-908

TI-2016-08584 CVE-2016-10542 · GHSA-6663-c963-2gqg

MEDIUM 43

ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455".

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.07424 Published 2018-05-31 Fixed in 1.1.1 CWE-400

TI-2016-08560 CVE-2016-10518 · GHSA-2mhh-w6q8-5hxw

LOW 37

A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by sending a ping frame.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01984 Published 2018-05-31 Fixed in 1.0.1 CWE-201

TI-2021-12308 CVE-2021-32640 · GHSA-6fc8-4gx4-v693

LOW 29

ws is an open source WebSocket client and server library for Node.js.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02821 Published 2021-05-25 Partial fix · 7.4.6, 6.2.2 +1 CWE-400