CVE-2026-45736
EUVD-2026-3054315.05.2026, 15:16
ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument. This vulnerability is fixed in 8.20.1.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ws_project | ws | 8.0.0 ≤ 𝑥 < 8.20.1 |
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
| Vendor | Product | Version | Source |
|---|---|---|---|
| Red Hat | Cryostat 4 on RHEL 9 | 4.2.0-13 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Ansible Automation Platform 2.6 | 1782761510 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Developer Hub 1.10 | 1783448184 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Developer Hub 1.9 | 1782761244 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Discovery 2 | 1782166952 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 10.0.109-1.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 8.0.128-1.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 9.0.118-1.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Hardened Images | 1.22.22-18.1.hum1 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Migration Toolkit 1.8 | 1783690532 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | 1784670101 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | 1784724699 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.20 | 1784730857 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | 1784127553 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.21 | 1784713741 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.22 | 1784144936 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Container Platform 4.22 | 1785230147 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Dev Spaces 3.29 | 1782498475 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat OpenShift Dev Spaces 3.29 | 1782498792 ≤ 𝑥 < * | ADP |
| Red Hat | Red Hat Trusted Artifact Signer 1.4 | 1783327185 ≤ 𝑥 < * | ADP |
Debian Releases
Ubuntu Releases
Common Weakness Enumeration
References