npm/ws: high 7.5
Denial of Service in ws
Action: Upgrade ws to 1.1.5 or later.
npm i ws@1.1.5npm i ws@3.3.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.6.0 | 1.1.5 | - |
| 2.0.0 | 3.3.1 | - |
Fixed versions
| 1.1.5 | 3.3.1 |
Sources
- osv: GHSA-5v72-xg48-5rpm
- https://github.com/websockets/ws/commit/a810bfa44f08c84ff3f43cc71327e9bb5fb273ef
- https://github.com/websockets/ws/commit/c4fe46608acd61fbf7397eadc47378903f95b78a
- https://github.com/websockets/ws/commit/f8fdcd40ac8be7318a6ee41f5ceb7e77c995b407
- https://github.com/websockets/ws
- https://snyk.io/vuln/npm:ws:20171108
published · modified · JSON