PT-2026-60379

CVE-2026-54464

Published

2026-07-15

Updated

2026-08-01

Description by

CVSS 4.0

6.3

Medium

MetricsAV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions (affected versions not specified)

Description When used with the permessage-deflate extension, a WebSocket server or client may accept messages exceeding the configured maximum size. This occurs because the size limit is validated against the compressed data length in the message frames' headers rather than the size after decompression, potentially leading to excessive resource usage.

Recommendations Update to version 0.8.1.

Exploitability

Exploit

Fix

Impacts

Vendors