PT-2026-60381 · Npm · Websocket-Driver
CVE-2026-54466
·
Published
2026-07-15
·
Updated
2026-09-04
CVSS v4.0
9.2
Critical
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
websocket-driver versions prior to 0.7.5
Description
The frame format in draft versions of the WebSocket protocol contains a length header that allows an arbitrarily large integer to be encoded as a sequence of bytes with the high bit set. A client can send an indefinite sequence of bytes with values
0x80 or above, causing the server to parse these bytes into an ever-growing integer within lib/websocket/driver/draft75.js. Because JavaScript numbers are 64-bit floating point values, the number eventually loses precision, resulting in the subsequent payload being parsed incorrectly.Recommendations
Update to version 0.7.5.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Websocket-Driver