{"action":"Upgrade @trpc/server to 11.1.1 or later.","affected":[{"fixed":"11.1.1","introduced":"11.0.0"}],"component":"@trpc/server","cve_ids":["CVE-2025-43855"],"ecosystem":"npm","epss":0.00423,"exploited":false,"fixed_versions":["11.1.1"],"ghsa_id":"GHSA-pj3v-9cm8-gvj8","id":"tcs_01M5KG3RWK2142QZFVMJBW6XRM","modified_at":"2025-04-24T16:27:17.713097Z","published_at":"2025-04-24T16:03:57Z","references":["https://osv.dev/vulnerability/GHSA-pj3v-9cm8-gvj8","https://github.com/trpc/trpc/security/advisories/GHSA-pj3v-9cm8-gvj8","https://nvd.nist.gov/vuln/detail/CVE-2025-43855","https://github.com/trpc/trpc/pull/5839","https://github.com/trpc/trpc/commit/9beb26c636d44852e0f407f3d7a82ad54df65b4d","https://github.com/trpc/trpc","https://github.com/trpc/trpc/blob/8cef54eaf95d8abc8484fe1d454b6620eeb57f2f/packages/server/src/adapters/ws.ts#L171"],"severity":{"label":"high","score":8.7},"sources":[{"source":"osv","source_id":"GHSA-pj3v-9cm8-gvj8","url":"https://osv.dev/vulnerability/GHSA-pj3v-9cm8-gvj8"},{"source":"nvd","source_id":"CVE-2025-43855","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43855"}],"summary":"tRPC 11 WebSocket DoS Vulnerability"}