CVE-2021-32640
1 advisory.
npm/ws CVE-2021-32640: medium 5.3, EPSS 2.82%
ReDoS in Sec-Websocket-Protocol header
Action: Upgrade ws to 5.2.3 or later.
npm i ws@7.4.6npm i ws@6.2.2npm i ws@5.2.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.0.0 | 7.4.6 | - |
| 6.0.0 | 6.2.2 | - |
| 5.0.0 | 5.2.3 | - |
Fixed versions
| 7.4.6 | 6.2.2 | 5.2.3 |
Sources
- osv: GHSA-6fc8-4gx4-v693
- https://github.com/websockets/ws/security/advisories/GHSA-6fc8-4gx4-v693
- https://nvd.nist.gov/vuln/detail/CVE-2021-32640
- https://github.com/websockets/ws/issues/1895
- https://github.com/websockets/ws/commit/00c425ec77993773d823f018f64a5c44e17023ff
- https://github.com/websockets/ws
- https://lists.apache.org/thread.html/rdfa7b6253c4d6271e31566ecd5f30b7ce1b8fb2c89d52b8c4e0f4e30@%3Ccommits.tinkerpop.apache.org%3E
- https://security.netapp.com/advisory/ntap-20210706-0005
CVE-2021-32640 · published · modified · JSON