10secondsofcode-custom (1.0.0), 1kohei1 (>=1.0.0, <=1.0.1) +2768 more potentially affected by CVE-2021-32640 via ws (>=7.0.0, <=7.4.5)

🗓️ 28 May 2021 19:19:03Reported by Vulners OSVType

vulnersosv🔗 osv.dev👁 4 Views

ws package versions 7.0.0-7.4.5 vulnerable to CVE-2021-32640 causing denial of service via WebSocket connections.

Reporter	Title	Published	Views	Family All 31
GithubExploit	solutions	23 Aug 202617:04	–	githubexploit
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Node.js affect IBM Cloud Pak System.	16 Aug 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vulnerable to multiple vulnerabilities	12 Dec 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Workspace has addressed multiple vulnerabilities	27 Mar 202420:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	5 Dec 202219:00	–	ibm
ATTACKERKB	CVE-2021-32640	25 May 202119:15	–	attackerkb
BDU FSTEC	The vulnerability of the client-server WebSocket library in Node-ws software, related to uncontrolled resource consumption, allows attackers to trigger a service failure.	5 Oct 202100:00	–	bdu_fstec
Circl	CVE-2021-32640	7 Apr 202615:02	–	circl
CNNVD	github ws 资源管理错误漏洞	25 May 202100:00	–	cnnvd
CVE	CVE-2021-32640	25 May 202118:25	–	cve

08 Jul 2026 06:28Current

6.3Medium risk

Vulners AI Score6.3

CVSS 25

CVSS 3.15.3

EPSS0.02821

ws CVE-2021-32640 Denial of Service WebSocket NPM transitive dependency Node.js