Verified Advisories

Concise advisories for CRITICAL/HIGH vulnerabilities – affected and fixed versions confirmed against the vendor's own advisory before publishing. 1 total.

Severity: All Critical High

Library: websocket-driver

CVE-2026-54466 CRITICAL CVSS 9.2 Verified Advisory Jul 17, 2026

Message corruption in the websocket-driver npm package (CVE-2026-54466)

CVE-2026-54466 is a message corruption vulnerability in the websocket-driver npm package affecting draft versions of the WebSocket protocol implementation. A remote, unauthenticated client can send an indefinite seque...

Fixed in >= 0.7.5

Information Disclosure