PkgSeer

Vulnerabilities

Last updated 44 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
websocket Unbounded memory allocation based on untrusted length Unknown 4 years ago 2 hours ago
ultimate-websocket Malicious code in ultimate-websocket (npm) Unknown 7 days ago 7 days ago
utcp-websocket utcp-gql SSRF: CVE-2026-44661 fix not applied to the GraphQL and WebSocket plugins Medium Risk 4.7 1 month ago 1 month ago
utcp-websocket utcp-gql SSRF: CVE-2026-44661 fix not applied to the GraphQL and WebSocket plugins Medium Risk 4.7 1 month ago 1 month ago
websocket-driver websocket-driver: Message corruption via abuse of protocol length headers Critical 9.5 2 months ago 1 month ago
github.com/gorilla/websocket Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key Medium Risk 6.0 1 month ago 1 month ago
websocket-driver websocket-driver: Memory exhaustion via abuse of protocol length headers Medium Risk 6.0 2 months ago 1 month ago
websocket-driver websocket-driver: Resource limit bypass via message compression Medium Risk 6.0 2 months ago 1 month ago
websocket-driver websocket-driver-ruby: Denial of service via malformed Host header High Risk 8.0 2 months ago 1 month ago
websocket-driver websocket-driver: Resource limit bypass via message compression Medium Risk 6.0 2 months ago 1 month ago
websocket-driver websocket-driver: Memory exhaustion in HTTP header parser Medium Risk 6.0 2 months ago 1 month ago
org.springframework:spring-websocket Spring Framework STOMP over WebSocket applications may allow attackers to send unauthorized messages Medium Risk 4.3 12 months ago 1 month ago
faye-websocket Missing TLS certificate verification in faye-websocket High Risk 8.0 6 years ago 1 month ago
org.java-websocket:Java-WebSocket Improper Validation of Certificate with Host Mismatch in Java-WebSocket Critical 9.0 6 years ago 1 month ago
org.apache.camel:camel-atmosphere-websocket Apache Camel-Atmosphere-Websocket: WebSocket dispatch header injection - the producer selected its target peers through Exchange headers whose names sat outside the filtered Camel namespace Critical 9.8 1 month ago 1 month ago
org.apache.camel:camel-vertx-websocket Apache Camel-Vertx-Websocket: The inbound consumer maps externally-supplied WebSocket query and path parameters into the Exchange without a HeaderFilterStrategy High Risk 7.5 3 months ago 1 month ago
org.apache.camel:camel-atmosphere-websocket Apache Camel-Atmosphere-Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy High Risk 7.5 3 months ago 1 month ago
github.com/gorilla/websocket Gorilla WebSocket Uses Cryptographically Weak PRNG for WebSocket Mask Key in github.com/gorilla/websocket Unknown 1 month ago 1 month ago
org.apache.tomcat.embed:tomcat-embed-websocket Infinite Loop in Apache Tomcat High Risk 7.5 4 years ago 1 month ago
org.apache.tomcat:tomcat-websocket Infinite Loop in Apache Tomcat High Risk 7.5 4 years ago 1 month ago
org.apache.tomcat.embed:tomcat-embed-websocket Denial of Service via incomplete cleanup vulnerability in Apache Tomcat Medium Risk 6.3 2 years ago 2 months ago
org.apache.tomcat:tomcat-websocket Denial of Service via incomplete cleanup vulnerability in Apache Tomcat Medium Risk 6.3 2 years ago 2 months ago
org.springframework:spring-websocket Spring Framework Predictable Session ID in WebSocket Module Medium Risk 4.8 4 months ago 2 months ago
websocket-extensions Regular Expression Denial of Service in websocket-extensions (RubyGem) High Risk 8.2 6 years ago 3 months ago
websocket-extensions Regular Expression Denial of Service in websocket-extensions (NPM package) High Risk 8.2 6 years ago 3 months ago
websocket-slot Malicious code in websocket-slot (npm) Unknown 4 months ago 3 months ago
@fairwords/websocket Malicious code in @fairwords/websocket (npm) Unknown 6 months ago 6 months ago
solara-websocket-dll Malicious code in solara-websocket-dll (npm) Unknown 11 months ago 9 months ago
react-native-websocket Malicious code in react-native-websocket (npm) Unknown 10 months ago 10 months ago
avior-atlas-draco-websockets Malicious code in avior-atlas-draco-websockets (npm) Unknown 11 months ago 11 months ago
bellatrix-panspermia-websockets-gulp Malicious code in bellatrix-panspermia-websockets-gulp (npm) Unknown 11 months ago 11 months ago
bellatrix-websockets-filament-biohacking Malicious code in bellatrix-websockets-filament-biohacking (npm) Unknown 11 months ago 11 months ago
cordelia-websockets-yakutsk-quark Malicious code in cordelia-websockets-yakutsk-quark (npm) Unknown 11 months ago 11 months ago
darkmatter-gravitationalwave-less-websockets Malicious code in darkmatter-gravitationalwave-less-websockets (npm) Unknown 11 months ago 11 months ago
equinox-passport-janus-websockets Malicious code in equinox-passport-janus-websockets (npm) Unknown 11 months ago 11 months ago
express-proxima-websockets-leda Malicious code in express-proxima-websockets-leda (npm) Unknown 11 months ago 11 months ago
firebase-command-ursa-websockets Malicious code in firebase-command-ursa-websockets (npm) Unknown 11 months ago 11 months ago
grus-pipe-websockets-grunt Malicious code in grus-pipe-websockets-grunt (npm) Unknown 11 months ago 11 months ago
hermes-websockets-arcturus-meteor Malicious code in hermes-websockets-arcturus-meteor (npm) Unknown 11 months ago 11 months ago
inflation-hercules-websockets-private Malicious code in inflation-hercules-websockets-private (npm) Unknown 11 months ago 11 months ago
install-fork-mdx-websockets Malicious code in install-fork-mdx-websockets (npm) Unknown 11 months ago 11 months ago
jupiter-aether-markdown-pdf-websockets Malicious code in jupiter-aether-markdown-pdf-websockets (npm) Unknown 11 months ago 11 months ago
karma-update-slidev-websockets Malicious code in karma-update-slidev-websockets (npm) Unknown 11 months ago 11 months ago
perseus-websockets-wasat-hydra Malicious code in perseus-websockets-wasat-hydra (npm) Unknown 11 months ago 11 months ago
phenomic-paleoclimatology-slidev-websockets Malicious code in phenomic-paleoclimatology-slidev-websockets (npm) Unknown 11 months ago 11 months ago
photon-airbnb-virgo-websockets Malicious code in photon-airbnb-virgo-websockets (npm) Unknown 11 months ago 11 months ago
proxima-thermosphere-weywot-websockets Malicious code in proxima-thermosphere-weywot-websockets (npm) Unknown 11 months ago 11 months ago
subduction-xenobiology-websockets-polaris Malicious code in subduction-xenobiology-websockets-polaris (npm) Unknown 11 months ago 11 months ago
websockets-areology-perseus-redgiant Malicious code in websockets-areology-perseus-redgiant (npm) Unknown 11 months ago 11 months ago
websockets-hawkingradiation-redis-barnard Malicious code in websockets-hawkingradiation-redis-barnard (npm) Unknown 11 months ago 11 months ago
Data courtesy of OSV.dev
Page 1