LOWnpm
GHSA-2mhh-w6q8-5hxw· CVE-2016-10518Remote Memory Disclosure in ws
Modified: 11/8/2023
package
npm/ws
pkg:npm/ws
HIGH7.5npm
GHSA-3h5v-q93c-6h6q· CVE-2024-37890ws affected by a DoS when handling a request with many HTTP headers
Modified: 9/10/2026
MEDIUM4.4npm
GHSA-58qx-3vcg-4xpx· CVE-2026-45736ws: Uninitialized memory disclosure
Modified: 9/10/2026
HIGH7.5npm
GHSA-5v72-xg48-5rpmDenial of Service in ws
Modified: 7/17/2026
HIGHnpm
GHSA-6663-c963-2gqg· CVE-2016-10542DoS due to excessively large websocket message in ws
Modified: 11/8/2023
MEDIUM5.3npm
GHSA-6fc8-4gx4-v693· CVE-2021-32640ReDoS in Sec-Websocket-Protocol header
Modified: 7/8/2026
HIGH7.5npm
GHSA-96hv-2xvq-fx4p· CVE-2026-48779ws: Memory exhaustion DoS from tiny fragments and data chunks
Modified: 9/10/2026