`ws`

Ecosystem:
npm

Package URL:
pkg:npm/ws

Total PRs:
15,994 Dependabot PRs

Latest PR:
about 1 hour ago

Unique Repositories:
5,811 repositories

Unique Repos (30 days):
2,555 repositories

Security Advisories

Denial of Service in ws

GHSA-5v72-xg48-5rpm HIGH published over 6 years ago • updated 3 months ago

Affected versions of `ws` can crash when a specially crafted `Sec-WebSocket-Extensions` header containing `Object.prototype` property names as exte...

DoS due to excessively large websocket message in ws

GHSA-6663-c963-2gqg CVE-2016-10542 HIGH published over 6 years ago • updated 3 months ago

Affected versions of `ws` do not appropriately limit the size of incoming websocket payloads, which may result in a denial of service condition whe...

Remote Memory Disclosure in ws

GHSA-2mhh-w6q8-5hxw CVE-2016-10518 LOW published over 6 years ago • updated 3 months ago

Versions of `ws` prior to 1.0.1 are affected by a remote memory disclosure vulnerability. In certain rare circumstances, applications which allow ...

ws affected by a DoS when handling a request with many HTTP headers

GHSA-3h5v-q93c-6h6q CVE-2024-37890 HIGH published about 1 year ago • updated about 1 month ago

### Impact A request with a number of headers exceeding the[`server.maxHeadersCount`][] threshold could be used to crash a ws server. ### Proof o...

ReDoS in Sec-Websocket-Protocol header

GHSA-6fc8-4gx4-v693 CVE-2021-32640 MODERATE published over 4 years ago • updated about 1 month ago

### Impact A specially crafted value of the `Sec-Websocket-Protocol` header can be used to significantly slow down a ws server. ### Proof of conc...

Recent PRs

Bump ws and socket.io

TonyGregg/covid19spread #39

6.2.1 → 6.2.3 Patch PR

Merged about 1 hour ago

chore(deps): bump ws in /docs

Jaspero/web-components #387

7.5.9 → 7.5.10 Patch PR

Open about 5 hours ago

Bump the npm_and_yarn group across 2 directories with 24 updates

q1blue/AgentGPT #40

8.13.0 → 8.18.3 Minor PR

Open about 5 hours ago

Bump ws in /puzzle-pages

msucorey/codewars #105

8.11.0 → 8.18.3 Minor PR

Open about 6 hours ago

Bump ws from 5.2.2 to 5.2.4

sumonst21/ttag-cli #2

5.2.2 → 5.2.4 Patch PR

Open about 7 hours ago

Bump the npm_and_yarn group across 1 directory with 15 updates

MithrandirEa/MithrandirEa.github.io #1

8.11.0 → 8.17.1 Minor PR

Open about 7 hours ago

chore(deps): bump ws

FantasticFiasco/recipes #97

7.5.9 → 7.5.10 Patch PR

Open about 16 hours ago

Bump the npm_and_yarn group across 1 directory with 21 updates

se2026/InstaPy #2

6.2.2 → 6.2.3 Patch PR

Merged about 18 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/github-theme #24

8.18.2 → 8.18.3 Patch PR

Open about 19 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/brainhack #32

8.18.2 → 8.18.3 Patch PR

Open about 19 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/oreo #29

8.18.2 → 8.18.3 Patch PR

Open about 19 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/qlean #29

8.18.2 → 8.18.3 Patch PR

Open about 19 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/lesswrong #28

8.18.2 → 8.18.3 Patch PR

Open about 19 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/suddha #30

8.18.2 → 8.18.3 Patch PR

Open about 19 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/neo #26

8.18.2 → 8.18.3 Patch PR

Open about 20 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/dynamic-color #29

8.18.2 → 8.18.3 Patch PR

Open about 20 hours ago

chore(deps): bump the npm_and_yarn group across 7 directories with 33 updates

redstonedesigner/docusaurus #1

7.5.7 → 7.5.10 Patch PR

Open about 20 hours ago

Bump the npm_and_yarn group across 6 directories with 19 updates

ibiscum/Vue.js-3-Design-Patterns-and-Best-Practices #5

8.13.0 → 8.18.3 Minor PR

Open about 21 hours ago 1 comment

Bump the npm_and_yarn group across 7 directories with 22 updates

ibiscum/Vue.js-3-Design-Patterns-and-Best-Practices #4

8.13.0 → 8.18.3 Minor PR

Merged about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/kurokula #23

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

Bump the npm_and_yarn group across 7 directories with 19 updates

ibiscum/Vue.js-3-Design-Patterns-and-Best-Practices #2

8.13.0 → 8.18.3 Minor PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/oistnb #26

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/ribbons #16

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/adrenaline #29

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/simply-colorful #27

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/obsidian_vibrant #26

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/nordic #29

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/perso #31

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/dekurai #33

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/mammoth #26

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/simplicity #29

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/faded #22

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/dark-graphite #25

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/abyssal #28

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/githubdhc #30

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/jotter #29

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/arcane #27

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/neon-synthwave #31

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/yue #26

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/purple-aurora #26

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/duality #16

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/willemstad #27

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/minimal-edge #28

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/publisher #16

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/poimandres #24

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/oliviers-theme #25

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/enhanced-file-explorer-tree #15

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/material-gruvbox #28

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/deeper-work #27

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/planetary #12

8.18.2 → 8.18.3 Patch PR

Open about 21 hours ago

Package Details

Name:	`ws`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/ws`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 3

MODERATE 1

LOW 1

View All npm Advisories

Package Information

Description:

Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js

Repository:	https://github.com/websockets/ws
Homepage:	https://github.com/websockets/ws
Latest Release:	`8.18.2` 4 months ago
Dependent Repos:	900,116
Dependent Packages:	19,475
Downloads:	440,496,315
Ranking:	Top 0.0376% by dependent repos Top 0.0016% by downloads Top 0.0056% by dependent pkgs

PR Status

Open 7,925 (49.6%)

Merged 767 (4.8%)

Closed 5,074 (31.8%)

PR Types

Removal 6 (0.0%)

Minor 1,516 (9.5%)

Major 288 (1.8%)

Patch 11,936 (74.7%)