Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-45736
4.4
MEDIUMCVSS v3
Published
May 15, 2026
Affected
1 project
Assigned by
GitHub
Severity scale
010
Description
ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument. This vulnerability is fixed in 8.20.1.
websockets/ws
GitHubSimple to use, blazing fast and thoroughly tested WebSocket client and server for Node.js
GitHubSimple to use, blazing fast and thoroughly tested WebSocket client and server for Node.js>= 8.0.0, < 8.20.1NVD