EUVD-2020-1096

Malware in sbrugna...

Malicious code in uws-trashme-after-121-merge (npm)

The package uws-trashme-after-121-merge was found to contain malicious code...

MAL-2025-38018 Malicious code in uws-trashme-after-121-merge (npm)

The package uws-trashme-after-121-merge was found to contain malicious code...

OSV-2021-1727 UNKNOWN WRITE in void uWS::WebSocketProtocol<true, Impl>::UnrolledXor<4>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=42672 Crash type: UNKNOWN WRITE Crash state: void uWS::WebSocketProtocol::UnrolledXor void uWS::WebSocketProtocol::UnrolledXor void uWS::WebSocketProtocol::UnrolledXor...

PT-2021-27967

Name of the Vulnerable Software and Affected Versions uWS affected versions not specified Description The issue is related to a crash type of UNKNOWN WRITE. It involves the uWS::WebSocketProtocol and its UnrolledXor functions. The crash state includes calls to UnrolledXor with different template...

OSV-2021-1392 Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39354 Crash type: Container-overflow READ 1 Crash state: std::1::function::func&& uWS::TemplatedApp uWS::TopicTree::publish ofats::anydetail::handlertraitsvoid, uWS::WebSocketfalse, true, test...

OSV-2021-1390 Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<false>&& uWS::TemplatedApp<false>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39348 Crash type: Container-overflow READ 1 Crash state: std::1::function::func&& uWS::TemplatedApp uWS::WebSocketfalse, true, test uWS::WebSocketfalse, true, test...

OSV-2021-1386 Container-overflow in std::__1::__function::__func<uWS::TemplatedApp<true>&& uWS::TemplatedApp<true>::

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39355 Crash type: Container-overflow READ 1 Crash state: std::1::function::func&& uWS::TemplatedApp:: uWS::TopicTree::publish uWS::TemplatedApp::publish...

PT-2021-27820

Name of the Vulnerable Software and Affected Versions uWS affected versions not specified Description A crash occurs due to a container-overflow read issue. The crash is related to the publish function in uWS::TemplatedApp and uWS::TopicTree. Recommendations At the moment, there is no information...

PT-2021-27823

Name of the Vulnerable Software and Affected Versions uWS affected versions not specified Description A crash issue was identified, characterized as a Container-overflow READ 1. The crash involves the uWS::TemplatedApp and uWS::WebSocket components. No information is available regarding the...

PT-2021-27824

Name of the Vulnerable Software and Affected Versions uWS affected versions not specified Description The issue is related to a crash caused by a container-overflow read. Technical details include a crash state involving uWS::TemplatedApp and uWS::TopicTree. The publish function of uWS::TopicTree...

Stack overflow

uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree called from uWS::TopicTree::unsubscribeAll. NOTE: the vendor's position is that this is "a minor issue or not even an issue at all" because the developer of an application that uses uWebSockets should no...

CVE-2020-36406: Out-of-bounds Write

uWebSockets 18.11.0 and 18.12.0 has a stack-based buffer overflow in uWS::TopicTree::trimTree called from uWS::TopicTree::unsubscribeAll. NOTE: the vendor's position is that this is "a minor issue or not even an issue at all" because the developer of an application that uses uWebSockets should no...

OSV-2021-453 UNKNOWN WRITE in std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31457 Crash type: UNKNOWN WRITE Crash state: std::1::pair uWS::HttpParser::fenceAndConsumePostPadded0 uWS::HttpParser::consumePostPadded std::1::function::funcLLVMFuzzerTestOneInput::$0, std::1::allocatorLL...

PT-2021-28124

Name of the Vulnerable Software and Affected Versions uWS affected versions not specified Description The issue is related to a crash in the uWS HttpParser, specifically in the fenceAndConsumePostPadded and consumePostPadded functions. The crash type is reported as UNKNOWN WRITE. No information i...

PT-2021-28111

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which can cause a crash. Technical details include a crash type of Heap-use-after-free WRITE 8, and th...

OSV-2020-2221 UNKNOWN READ in std::__1::pair<unsigned int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28216 Crash type: UNKNOWN READ Crash state: std::1::pair uWS::HttpParser::fenceAndConsumePostPadded0 uWS::HttpParser::consumePostPadded std::1::function::funcLLVMFuzzerTestOneInput::$0, std::1::allocatorLL...

OSV-2020-2217 Heap-buffer-overflow in std::__1::pair<int, void*> uWS::HttpParser::fenceAndConsumePostPadded<0>

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=28143 Crash type: Heap-buffer-overflow READ Crash state: std::1::pair uWS::HttpParser::fenceAndConsumePostPadded uWS::HttpParser::consumePostPadded uWS::HttpContext::init...

PT-2020-22164

Name of the Vulnerable Software and Affected Versions uWS affected versions not specified Description The issue is related to a crash in the uWS HttpParser, specifically in the fenceAndConsumePostPadded and consumePostPadded functions. The crash type is reported as UNKNOWN READ. No information is...

PT-2020-22162

Name of the Vulnerable Software and Affected Versions uWS affected versions not specified Description A heap-buffer-overflow read issue has been identified. The crash occurs in the uWS::HttpParser component, specifically in the fenceAndConsumePostPadded and consumePostPadded functions, which are...