CLSA-2026-1790610738 TuxCare security update for ws (2 CVEs)

TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.14.2-tuxcare.1...

ROOT-APP-NPM-CVE-2026-45736 CVE-2026-45736 in ws - Patched by Root

Root has patched CVE-2026-45736 in the ws package for Root:npm. Multiple fixed versions available...

Malware in ultra-ws

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

PT-2026-108093

TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.14.2-tuxcare.1...

CLSA-2026-1790541935 TuxCare security update for ws (2 CVEs)

TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.17.1-tuxcare.1...

CLSA-2026-1790541916 TuxCare security update for ws (2 CVEs)

TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.18.3-tuxcare.1...

PT-2026-107734

TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.17.1-tuxcare.1...

PT-2026-107732

TuxCare rebuilt ws to address 2 CVEs. Fixed in 8.18.3-tuxcare.1...

CLSA-2026-1790413013 TuxCare security update for ws (1 CVE)

TuxCare rebuilt ws to address 1 CVE. Fixed in 8.2.3-tuxcare.2...

PT-2026-106703

TuxCare rebuilt ws to address 1 CVE. Fixed in 8.2.3-tuxcare.2...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by a Denial of Service vulnerability in ws (CVE-2026-48779)

Summary A Denial of Service vulnerability in the ws WebSocket library CVE-2026-48779 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 8.21.1. Vulnerability Details CVEID:CVE-2026-48779 DESCRIPTION: ws is an open source WebSocket client and serve...

Cline: Cross-Origin WebSocket Hijacking in Cline Hub Dashboard (`/browser` endpoint)

Summary The Cline Hub dashboard server @cline/cline-hub, launched via the cline dashboard CLI command, accepts WebSocket connections on the /browser endpoint without validating the HTTP Origin header. When ROOMSECRET is not set—the default for local 127.0.0.1 binds—isAuthorizedBrowserRequest...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by an uninitialized memory disclosure vulnerability in ws (CVE-2026-45736)

Summary An uninitialized memory disclosure vulnerability in the ws WebSocket library CVE-2026-45736 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 8.21.1. Vulnerability Details CVEID:CVE-2026-45736 DESCRIPTION: ws is an open source WebSocket...

ROOT-APP-MAVEN-CVE-2026-40994 CVE-2026-40994 in org.springframework.ws:spring-ws-security - Patched by Root

Root has patched CVE-2026-40994 in the org.springframework.ws:spring-ws-security package for Root:Maven. Multiple fixed versions available...

ROOT-APP-MAVEN-CVE-2026-40999 CVE-2026-40999 in org.springframework.ws:spring-ws-core - Patched by Root

Root has patched CVE-2026-40999 in the org.springframework.ws:spring-ws-core package for Root:Maven. Multiple fixed versions available...

Malicious Package

Overview turbo-ws is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

CLSA-2026-1790202672 TuxCare security update for ws (1 CVE)

TuxCare rebuilt ws to address 1 CVE. Fixed in 8.5.0-tuxcare.2...

CLSA-2026-1790200934 TuxCare security update for ws (1 CVE)

TuxCare rebuilt ws to address 1 CVE. Fixed in 8.11.0-tuxcare.2...

CVE-2026-91866

A flaw was found in Neethi. A remote attacker could exploit this vulnerability by providing specially crafted WS-Policy documents. This could force Neethi's policy-intersection to perform an exponential amount of work, leading to a denial of service DoS by consuming excessive CPU resources...

CVE-2026-91865

A flaw was found in Apache Neethi. A remote attacker could exploit this vulnerability by providing a specially crafted WS-Policy document containing repeated policy references. This document would force Neethi to exponentially re-expand the same references during normalization, consuming excessiv...