Lucene search
+L

290 matches found

osv_ghsa
osv_ghsa
•added 2026/10/27 7:02 p.m.•6 views

GHSA-9FM3-97PX-RJF6 undici WebSocket client vulnerable to Denial of Service via unbounded automatic PONG buffering

Impact undici's WebSocket client including Node.js's bundled globalThis.WebSocket can be driven to exhaust process memory by a malicious or compromised WebSocket server. For every PING frame received, the receiver automatically writes a PONG response to the socket and ignores the false return val...

5.9CVSS7.2AI score0.00321EPSS
SaveExploits0References10
Rows per page
Query Builder