{"action":"Upgrade websocket to 0.26.5 or later.","affected":[{"fixed":"0.26.5","introduced":"0.0.0-0"}],"component":"websocket","cve_ids":["CVE-2022-35922"],"ecosystem":"crates.io","epss":0.01918,"exploited":false,"fixed_versions":["0.26.5"],"ghsa_id":"GHSA-qrjv-rf5q-qpxc","id":"tcs_01M5KF7V3ZRZYX9VNWTG8ERQSX","modified_at":"2026-10-12T18:00:06.812726782Z","published_at":"2022-08-01T12:00:00Z","references":["https://osv.dev/vulnerability/RUSTSEC-2022-0035","https://crates.io/crates/websocket","https://rustsec.org/advisories/RUSTSEC-2022-0035.html","https://github.com/websockets-rs/rust-websocket/commit/cbf6e9983e839d2ecad86de8cd1b3f20ed43390b"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"RUSTSEC-2022-0035","url":"https://osv.dev/vulnerability/RUSTSEC-2022-0035"}],"summary":"Unbounded memory allocation based on untrusted length"}