2 matches found
OESA-2026-3212 nodejs-websocket-driver security update
. Security Fixes: websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitrarily large integer to be encoded as a sequence of bytes with the high bit set. By...
9.2CVSS5.4AI score0.0038EPSS
SaveExploits0References2
CVE-2026-54466: Improper Handling of Length Parameter Inconsistency
websocket-driver is a WebSocket protocol handler with pluggable I/O. Prior to 0.7.5, the frame format in draft versions of the WebSocket protocol includes a length header that allows an arbitrarily large integer to be encoded as a sequence of bytes with the high bit set. By sending an indefinite...
9.2CVSS5.8AI score0.0038EPSS
SaveExploits0References4
20