Security Bulletin:Vulnerability in ws affects IBM Netezza Appliance

Summary The ws package is used by IBM Netezza Appliance. IBM Netezza Appliance has addressed the applicable CVECVE-2026-48779 Vulnerability Details CVEID:CVE-2026-48779 DESCRIPTION: ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to but not including 5.2.5...

Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway

Summary Security Vulnerabilities affect IBM Voice Gateway. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2026-48779 DESCRIPTION: ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to but not including 5.2.5, from 6.0.0 up to 6.2.4,...

Fedora 43 : python-jupytext (2026-31e6b85f4e)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-31e6b85f4e advisory. See https://github.com/jupytext/jupytext/releases/tag/v1.19.4 for changes in version 1.19.4. Notable, this update fixes CVE-2026-45736 and...

openSUSE 16 Security Update : python-pydata-sphinx-theme (openSUSE-SU-2026:21173-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21173-1 advisory. Changes in python-pydata-sphinx-theme: - Refresh js dependencies: ws to 7.5.11 bsc1268957, CVE-2026-48779 - Refresh vendored tarball...

Security update for python-pydata-sphinx-theme (important)

openSUSE security update: security update for python-pydata-sphinx-theme ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21173-1 Rating: important References: bsc1264374 bsc1268957 Cross-References: CVE-2026-48779 CVE-2026-6321 CVSS scores:...

OPENSUSE-SU-2026:21173-1 Security update for python-pydata-sphinx-theme

This update for python-pydata-sphinx-theme fixes the following issues: Changes in python-pydata-sphinx-theme: - Refresh js dependencies: ws to 7.5.11 bsc1268957, CVE-2026-48779 - Refresh vendored tarball CVE-2026-6321, bsc1264374...

python311-jupyter-ydoc-3.5.0-1.1 on GA media (moderate)

python311-jupyter-ydoc-3.5.0-1.1 on GA media Announcement ID: openSUSE-SU-2026:11137-1 Rating: moderate Cross-References: CVE-2026-48779 CVSS scores: CVE-2026-48779 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-48779 SUSE : 7.1...

jupyter-jupyterlab-templates-0.5.3-2.1 on GA media (moderate)

jupyter-jupyterlab-templates-0.5.3-2.1 on GA media Announcement ID: openSUSE-SU-2026:11138-1 Rating: moderate Cross-References: CVE-2026-48779 CVSS scores: CVE-2026-48779 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-48779 SUSE : 7.1...

jupyter-nbclassic-1.3.3-2.1 on GA media (moderate)

jupyter-nbclassic-1.3.3-2.1 on GA media Announcement ID: openSUSE-SU-2026:11123-1 Rating: moderate Cross-References: CVE-2026-48779 CVSS scores: CVE-2026-48779 SUSE : 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2026-48779 SUSE : 7.1...

Linux Distros Unpatched Vulnerability : CVE-2026-48779

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to but not including 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to...

CVE-2026-48779 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, langfuse, py3-jupyterlab, code-server, kubeflow-katib...

003-gas-convert (1.0.1), 0x-hunter-core (>=1.0.0-3, <=1.0.1-5) +28838 more potentially affected by CVE-2026-48779 via ws (>=1.1.0, <=5.2.2)

ws NPM version =1.1.0, =1.0.0-3, =0.0.3, =1.1.0, =0.9.9, =1.0.0, =0.0.1, =0.11.3, =0.1.0, =1.0.2, =1.0.7 and more Source cves: CVE-2026-48779 Source advisory: SNYK:JS-WS-17344547...

-fides-amor-et-lux (1.0.0), -price-checker (>=1.0.0, <=1.0.5) +33774 more potentially affected by CVE-2026-48779 via ws (>=8.0.0, <=8.20.1)

ws NPM version =8.0.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0-beta.3 - 0g-vibekit 0.1.0 - 0g-zksettlement-client 1.0.0 - 0wcc9yywcywy 1.0.0 and more Source cves: CVE-2026-48779 Source advisory: OSV:GHSA-96HV-2XVQ-FX4P...

7ghost (>=4.11.25, <=4.11.46), @100mslive/hms-excalidraw (>=0.1.3, <=0.1.14) +1258 more potentially affected by CVE-2026-48779 via ws (>=6.0.0, <=6.2.3)

ws NPM version =6.0.0, =4.11.25, =0.1.3, =0.0.1-bate.30, =0.0.1, =0.0.1, =7.0.0-rc1, =0.1.0, =4.4.0-rc.1, =4.2.2, =2.9.0, =0.0.1-alpha.95, =1.0.0-alpha.46, =1.2.0, =1.6.2 and more Source cves: CVE-2026-48779 Source advisory: SNYK:JS-WS-17344547...

0.edsql (>=1.0.49, <=1.0.50), 0x-v4-nft (1.1.0) +8945 more potentially affected by CVE-2026-48779 via ws (>=7.0.0, <=7.5.10)

ws NPM version =7.0.0, =1.0.49, =0.0.11, =0.0.2, =1.0.0, =0.1.0, =0.0.12, =0.0.12, =0.1.0, =1.0.22, =3.10.1, =3.11.0 and more Source cves: CVE-2026-48779 Source advisory: OSV:GHSA-96HV-2XVQ-FX4P...

-fides-amor-et-lux (1.0.0), -price-checker (>=1.0.0, <=1.0.5) +33774 more potentially affected by CVE-2026-48779 via ws (>=8.0.0, <=8.20.1)

ws NPM version =8.0.0, =1.0.0, =1.0.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0-beta.3 - 0g-vibekit 0.1.0 - 0g-zksettlement-client 1.0.0 - 0wcc9yywcywy 1.0.0 and more Source cves: CVE-2026-48779 Source advisory: SNYK:JS-WS-17344547...

CVE-2026-48779

creationtimestamp| type| source ---|---|--- 2026-05-22 18:05:36+00:00| published-proof-of-concept| https://github.com/websockets/ws/security/advisories/GHSA-96hv-2xvq-fx4p 2026-06-17 00:09:20+00:00| seen| https://gist.github.com/djlan/becffd7152d874641e42038b1b748f54 2026-06-17 00:55:40+00:00|...