CVE-2026-45736
EUVD-2026-3054315.05.2026, 15:16
ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument. This vulnerability is fixed in 8.20.1.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ws_project | ws | 8.0.0 ≤ 𝑥 < 8.20.1 |
𝑥
= Vulnerable software versions
Debian Releases
Common Weakness Enumeration
Vulnerability Media Exposure