UBUNTU-CVE-2026-9675

Impact: The undici WebSocket client enforces maxPayloadSize per-frame but does not enforce the cumulative size of fragmented uncompressed messages. A malicious WebSocket server can stream many small fragments that each pass per-frame validation but collectively exceed the configured limit, causin...

CVE-2026-9675

creationtimestamp| type| source ---|---|--- 2026-06-17 16:24:39+00:00| seen| https://bsky.app/profile/ulisesgascon.com/post/3moipzi2kmc2g 2026-06-17 19:00:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiyr2plnu2x 2026-06-18 15:59:02+00:00| seen|...