CVE-2026-45736
1 advisory.
npm/ws CVE-2026-45736: medium 4.4
ws: Uninitialized memory disclosure
Action: Upgrade ws to 8.20.1 or later.
npm i ws@8.20.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.0.0 | 8.20.1 | - |
Fixed versions
| 8.20.1 |
Sources
- osv: GHSA-58qx-3vcg-4xpx
- https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx
- https://nvd.nist.gov/vuln/detail/CVE-2026-45736
- https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086
- https://github.com/websockets/ws
CVE-2026-45736 · published · modified · JSON