003-gas-convert (1.0.1), 0x-hunter-core (>=1.0.0-3, <=1.0.1-5) +28832 more potentially affected by CVE-2026-48779 via ws (>=1.1.0, <=5.2.2)

🗓️ 15 Jun 2026 16:34:23Reported by Vulners OSVType

vulnersosv🔗 security.snyk.io👁 8 Views

ws npm package v1.1.0-5.2.2 affected by CVE-2026-48779, impacting 28,838+ packages via transitive dependency.

Reporter	Title	Published	Views	Family All 409
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs	12 Aug 202613:52	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	3 Aug 202611:18	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway	7 Jul 202619:10	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in ws affects IBM Netezza Appliance	10 Aug 202612:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Security QRadar EDR Software	27 Aug 202615:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.	7 Aug 202615:45	–	ibm
Atlassian	DoS (Denial of Service) ws Dependency in Bitbucket Data Center	11 Aug 202611:31	–	atlassian
Atlassian	DoS (Denial of Service) ws Dependency in Confluence Data Center	17 Jun 202623:06	–	atlassian
Chainguard	CVE-2026-48779 vulnerabilities	16 Jun 202620:22	–	cgr
Circl	CVE-2026-48779	22 May 202618:05	–	circl

24 Jun 2026 05:49Current

4.9Medium risk

Vulners AI Score4.9

CVSS 3.17.5

EPSS0.00812

SSVC

ws CVE-2026-48779 npm transitive dependency DoS websocket security advisory