CVE-2022-39386

@fastify/websocket provides WebSocket support for Fastify. Any application using @fastify/websocket could crash if a specific, malformed packet is sent. All versions of fastify-websocket are also impacted. That module is deprecated, so it will not be patched. This has been patched in version 7.1....

CVE-2022-39386

@fastify/websocket provides WebSocket support for Fastify. Any application using @fastify/websocket could crash if a specific, malformed packet is sent. All versions of fastify-websocket are also impacted. That module is deprecated, so it will not be patched. This has been patched in version 7.1....

CVE-2022-39386 fastify-websocket vulnerable to uncaught exception via crash on malformed packet

@fastify/websocket provides WebSocket support for Fastify. Any application using @fastify/websocket could crash if a specific, malformed packet is sent. All versions of fastify-websocket are also impacted. That module is deprecated, so it will not be patched. This has been patched in version 7.1....

CVE-2022-39386

The CVE concerns @fastify/websocket/fastify-websocket: all versions are reported to crash when processing a specific malformed WebSocket packet, causing a Denial of Service. The issue stems from a crash on malformed input, and the module is deprecated with no built-in patches. Patched versions ar...

@kyedoesdev/lente-cli (>=0.1.0, <=0.1.1), @kyedoesdev/lente-core (0.1.0) potentially affected by CVE-2022-39386 via @fastify/websocket (5.0.0)

@fastify/websocket NPM version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/websocket and may be impacted: - @kyedoesdev/lente-cli =0.1.0, =0.1.1 - @kyedoesdev/lente-core 0.1.0 Source cves: CVE-2022-39386 Source advisory:...

@frontify/frontify-cli (5.0.1), @my-healthcare/kankan-services (1.0.0) +8 more potentially affected by CVE-2022-39386 via @fastify/websocket (6.0.1)

@fastify/websocket NPM version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @fastify/websocket and may be impacted: - @frontify/frontify-cli 5.0.1 - @my-healthcare/kankan-services 1.0.0 - @ts4/hc =1.0.19, =1.0.2, =1.0.66, =0.0.1, =0.6.0,...

@0x77/ccpack (>=0.0.0, <=0.1.5), @aio-server/core (>=0.0.1, <=0.0.1001) +27 more potentially affected by CVE-2022-39386 via fastify-websocket (>=4.0.0, <=4.2.2)

fastify-websocket NPM version =4.0.0, =0.0.0, =0.0.1, =0.0.1, =4.3.0-depup.0, =0.2.42, =2.0.3, =9.1.1, =1.8.0, =1.0.0-pre.3, =2.0.0-alpha, =1.0.0, =0.0.1, =1.0.1, =0.0.10, =0.0.40 and more Source cves: CVE-2022-39386 Source advisory: OSV:GHSA-4PCG-WR6C-H9CQ...