396 matches found
CVE-2026-100403
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to versions 1.4.6, 1.5.2, and 1.6.1, the BACnet/SC hub's Linux WebSocket server reassembles fragmented WebSocket messages into a per-connection fragmentbuffer. It grows that buffer with realloc on every...
CVE-2026-100403
The BACnet Stack , an open source C library for embedded systems, contains a vulnerability in the BACnet/SC hub's Linux WebSocket server . The server reassembles fragmented WebSocket messages into a per-connection fragment_buffer using realloc(), but lacks an upper bound on growth. A remote peer ...
CLEANSTART-2026-ID50427 ws is an open source WebSocket client and server for Node
Security vulnerability affects the argo-workflows package. ws is an open source WebSocket client and server for Node...
CLEANSTART-2026-XW34925 ws is an open source WebSocket client and server for Node
Security vulnerability affects the argo-workflows package. ws is an open source WebSocket client and server for Node...
CVE-2026-92834
A flaw was found in Apache Thrift. The C++ WebSocket server mishandles uninitialized resources and returns an incorrect status code when processing requests. Under specific conditions, a remote attacker could exploit this vulnerability to trigger improper application states and compromise system...
BIT-THRIFT-2026-92834 Apache Thrift: C++ WebSocket server transport does not read a full request length
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
PT-2026-109199
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
SUSE CVE-2026-83745
Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...
SUSE CVE-2026-92834
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
Linux Distros Unpatched Vulnerability : CVE-2026-92834
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0...
EUVD-2026-76105
Headroom vulnerable to Cross-Site WebSocket Hijacking CSWSH...
CVE-2026-83745
Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...
DEBIAN-CVE-2026-83745
Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...
AZL-105953 CVE-2026-83745 affecting package thrift for versions less than 0.25.0-1
Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...
CVE-2026-83745
Memory allocation with excessive size value, Improper handling of length parameter inconsistency vulnerability in Apache Thrift nodejs and D lang bindings. Both bindings' WebSocket server transports read the payload length out of the frame header and allocate that many bytes immediately, without...
DEBIAN-CVE-2026-92834
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
CVE-2026-92834
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
AZL-105422 CVE-2026-92834 affecting package thrift for versions less than 0.25.0-1
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
UBUNTU-CVE-2026-92834
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...
CVE-2026-92834
Use of uninitialized resource, Return of wrong status code vulnerability in Apache Thrift C++ WebSocket server. This issue affects Apache Thrift: before 0.25.0. Users are recommended to upgrade to version 0.25.0, which fixes the issue...