CVE-2026-54466
1 advisory.
npm/websocket-driver CVE-2026-54466: critical
websocket-driver: Message corruption via abuse of protocol length headers
Action: Upgrade websocket-driver to 0.7.5 or later.
npm i websocket-driver@0.7.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.5 | - |
Fixed versions
| 0.7.5 |
Sources
- osv: GHSA-xv26-6w52-cph6
- https://github.com/faye/websocket-driver-node/security/advisories/GHSA-xv26-6w52-cph6
- https://github.com/faye/websocket-driver-node
- https://github.com/faye/websocket-driver-node/releases/tag/0.7.5
CVE-2026-54466 · published · modified · JSON