PT-2026-60380

CVE-2026-54465

·

Published

2026-07-15

·

Updated

2026-08-06

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions websocket-driver versions prior to 0.8.1
Description When used to implement a WebSocket server on top of a TCP server via the WebSocket::Driver.server() method or to complement a WebSocket client, the software is susceptible to memory exhaustion. A peer can cause a single connection to consume an unbounded amount of memory by sending an HTTP request or response containing a never-ending list of headers, potentially leading to the receiving process running out of memory.
Recommendations Update to version 0.8.1.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
GHSA-8J3G-F24P-4MPW
OESA-2026-3218
Found an issue in the description? Have something to add? Feel free to write us 👾