Debian/node-ws: high 7.5
ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was
Action: Upgrade node-ws to 8.18.0+~cs13.7.11-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.18.0+~cs13.7.11-1 | - |
Fixed versions
| 8.18.0+~cs13.7.11-1 |
Sources
- osv: DEBIAN-CVE-2024-37890#Debian:14/node-ws
- https://security-tracker.debian.org/tracker/CVE-2024-37890
published · modified · JSON