7ghost (>=4.11.25, <=4.11.46), @100mslive/hms-excalidraw (>=0.1.3, <=0.1.14) +1258 more potentially affected by CVE-2026-48779 via ws (>=6.0.0, <=6.2.3)

🗓️ 15 Jun 2026 16:34:23Reported by Vulners OSVType

ws NPM library v6.0.0-v6.2.3 vulnerable to CVE-2026-48779, impacting 7ghost and many packages via transitive dependency.

Reporter	Title	Published	Views	Family All 143
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs	12 Aug 202613:52	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	3 Aug 202611:18	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Voice Gateway	7 Jul 202619:10	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in ws affects IBM Netezza Appliance	10 Aug 202612:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Security QRadar EDR Software	27 Aug 202615:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities affect IBM Decision Optimization for Cloud Pak for Data.	7 Aug 202615:45	–	ibm
Atlassian	DoS (Denial of Service) ws Dependency in Bitbucket Data Center	11 Aug 202611:31	–	atlassian
Atlassian	DoS (Denial of Service) ws Dependency in Confluence Data Center	17 Jun 202623:06	–	atlassian
Chainguard	CVE-2026-48779 vulnerabilities	16 Jun 202620:22	–	cgr
Circl	CVE-2026-48779	22 May 202618:05	–	circl

13 Jul 2026 15:49Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.17.5

EPSS0.00812

SSVC