CVE-2025-43855
1 advisory.
npm/@trpc/server CVE-2025-43855: high
tRPC 11 WebSocket DoS Vulnerability
Action: Upgrade @trpc/server to 11.1.1 or later.
npm i @trpc/server@11.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 11.0.0 | 11.1.1 | - |
Fixed versions
| 11.1.1 |
Sources
- osv: GHSA-pj3v-9cm8-gvj8
- https://github.com/trpc/trpc/security/advisories/GHSA-pj3v-9cm8-gvj8
- https://nvd.nist.gov/vuln/detail/CVE-2025-43855
- https://github.com/trpc/trpc/pull/5839
- https://github.com/trpc/trpc/commit/9beb26c636d44852e0f407f3d7a82ad54df65b4d
- https://github.com/trpc/trpc
- https://github.com/trpc/trpc/blob/8cef54eaf95d8abc8484fe1d454b6620eeb57f2f/packages/server/src/adapters/ws.ts#L171
CVE-2025-43855 · published · modified · JSON