{"action":"Upgrade @anephenix/hub to 0.2.16 or later.","affected":[{"fixed":"0.2.16","introduced":"0"}],"component":"@anephenix/hub","cve_ids":["CVE-2026-73561"],"ecosystem":"npm","epss":0.00609,"exploited":false,"fixed_versions":["0.2.16"],"ghsa_id":"GHSA-g5vv-q72c-7j78","id":"tcs_01M5KFQ90YX38SA9W3NAE49CF8","modified_at":"2026-08-13T17:40:58.061550Z","published_at":"2026-07-24T21:47:29Z","references":["https://osv.dev/vulnerability/GHSA-g5vv-q72c-7j78","https://github.com/anephenix/hub/security/advisories/GHSA-g5vv-q72c-7j78","https://github.com/anephenix/hub/commit/67260d2a1407a77f082f02dc9e1f0891222c306d","https://github.com/anephenix/hub/commit/931576db3cdbf4f1583bd2c3c8759c4f4e032ab3","https://github.com/anephenix/hub"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-g5vv-q72c-7j78","url":"https://osv.dev/vulnerability/GHSA-g5vv-q72c-7j78"}],"summary":"@anephenix/hub: Unauthenticated WebSocket RPC Waiter Resource Exhaustion"}