ws project records
5 published records for vendor ws project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 20%
- Pre-auth RCE
- 0
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-400 Uncontrolled Resource Consumption3
- CWE-201 Insertion of Sensitive Information Into Sent Data1
- CWE-908 Use of Uninitialized Resource1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
60This week | CVE-2016-10542Weaponized | ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455".ws project · ws · CWE-400 | High7.5 | — | 7.2% | May 31, 2018 |
31Monitor | CVE-2016-10518No exploit | A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by sending a pingws project · ws · CWE-201 | High7.5 | — | 1.9% | May 31, 2018 |
30Monitor | CVE-2026-48779No exploit | ws: Memory exhaustion DoS from tiny fragments and data chunksws project · ws · CWE-400 | High7.5 | — | 1.4% | Jun 17, 2026 |
30Monitor | CVE-2026-45736No exploit | ws: Uninitialized memory disclosurews project · ws · CWE-908 | High7.5 | — | 0.7% | May 15, 2026 |
22Monitor | CVE-2021-32640No exploit | ReDoS in Sec-Websocket-Protocol headerws project · ws · CWE-400 | Medium5.3 | — | 2.8% | May 25, 2021 |
- CVE-2016-1054260This week
ws is a "simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455".
HighCVSS 7.5WeaponizedEPSS 7%ws project · wsMay 31, 2018
- CVE-2016-1051831Monitor
A vulnerability was found in the ping functionality of the ws module before 1.0.0 which allowed clients to allocate memory by sending a ping
HighCVSS 7.5No exploitEPSS 1%ws project · wsMay 31, 2018
- CVE-2026-4877930Monitor
ws: Memory exhaustion DoS from tiny fragments and data chunks
HighCVSS 7.5No exploitEPSS 1%ws project · wsJun 17, 2026
- CVE-2026-4573630Monitor
ws: Uninitialized memory disclosure
HighCVSS 7.5No exploitEPSS 0%ws project · wsMay 15, 2026
- CVE-2021-3264022Monitor
ReDoS in Sec-Websocket-Protocol header
MediumCVSS 5.3No exploitEPSS 2%ws project · wsMay 25, 2021