GHSA-6663-c963-2gqg
GitHub Security Advisory
DoS due to excessively large websocket message in ws
✓ GitHub Reviewed
HIGH
Has CVE
Advisory Details
Affected versions of `ws` do not appropriately limit the size of incoming websocket payloads, which may result in a denial of service condition when the node process crashes after receiving a large payload.
## Recommendation
Update to version 1.1.1 or later.
Alternatively, set the `maxpayload` option for the `ws` server to a value smaller than 256MB.
Affected Packages
npm
ws
Affected versions:
0
(fixed in 1.1.1)
Related CVEs
Key Information
7.5
/10
Dataset
Last updated: August 30, 2025 6:32 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.