PyPI/websockets CVE-2018-1000518: high 7.5, EPSS 1.83%
websockets is vulnerable to denial of service by memory exhaustion
Action: Upgrade websockets to 5.0 or later.
pip install websockets==5.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0 | 5.0 | - |
Fixed versions
| 5.0 |
Sources
- osv: GHSA-6g87-ff9q-v847
- https://nvd.nist.gov/vuln/detail/CVE-2018-1000518
- https://github.com/aaugustin/websockets/pull/407
- https://github.com/aaugustin/websockets
- https://github.com/pypa/advisory-database/tree/main/vulns/websockets/PYSEC-2018-79.yaml
CVE-2018-1000518 · published · modified · JSON