CVE-2026-54490
1 advisory.
npm/websocket-driver CVE-2026-54490: medium, EPSS 0.45%
websocket-driver: Resource limit bypass via message compression
Action: Upgrade websocket-driver to 0.7.5 or later.
npm i websocket-driver@0.7.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.5 | - |
Fixed versions
| 0.7.5 |
Sources
- osv: GHSA-mp7j-qc5w-4988
- https://github.com/faye/websocket-driver-node/security/advisories/GHSA-mp7j-qc5w-4988
- https://github.com/faye/websocket-driver-node
- https://github.com/faye/websocket-driver-node/releases/tag/0.7.5
CVE-2026-54490 · published · modified · JSON