| Package | Affected versions | Patched versions |
|---|---|---|
| ws | ≤ 1.1.0 | |
| ws | < 1.1.1 | 1.1.1 |
Affected versions of ws do not appropriately limit the size of incoming websocket payloads, which may result in a denial of service condition when the node process crashes after receiving a large payload.
Update to version 1.1.1 or later.
Alternatively, set the maxpayload option for the ws server to a value smaller than 256MB.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free