`ws`

Ecosystem:
npm

Package URL:
pkg:npm/ws

Total PRs:
16,036 Dependabot PRs

Latest PR:
about 3 hours ago

Unique Repositories:
5,844 repositories

Unique Repos (30 days):
2,552 repositories

Security Advisories

Denial of Service in ws

GHSA-5v72-xg48-5rpm HIGH published over 6 years ago • updated 3 months ago

Affected versions of `ws` can crash when a specially crafted `Sec-WebSocket-Extensions` header containing `Object.prototype` property names as exte...

DoS due to excessively large websocket message in ws

GHSA-6663-c963-2gqg CVE-2016-10542 HIGH published over 6 years ago • updated 3 months ago

Affected versions of `ws` do not appropriately limit the size of incoming websocket payloads, which may result in a denial of service condition whe...

Remote Memory Disclosure in ws

GHSA-2mhh-w6q8-5hxw CVE-2016-10518 LOW published over 6 years ago • updated 3 months ago

Versions of `ws` prior to 1.0.1 are affected by a remote memory disclosure vulnerability. In certain rare circumstances, applications which allow ...

ws affected by a DoS when handling a request with many HTTP headers

GHSA-3h5v-q93c-6h6q CVE-2024-37890 HIGH published about 1 year ago • updated about 1 month ago

### Impact A request with a number of headers exceeding the[`server.maxHeadersCount`][] threshold could be used to crash a ws server. ### Proof o...

ReDoS in Sec-Websocket-Protocol header

GHSA-6fc8-4gx4-v693 CVE-2021-32640 MODERATE published over 4 years ago • updated about 1 month ago

### Impact A specially crafted value of the `Sec-Websocket-Protocol` header can be used to significantly slow down a ws server. ### Proof of conc...

Recent PRs (filtered by: Patch PRs )

RSS Feed Clear filter

npm(deps): bump ws and @types/ws

rbxmacdl/rbxmacdl.github.io #10

8.18.0 → 8.18.3 Patch PR

Open about 4 hours ago 1 comment

chore(deps): bump the production-dependencies group across 1 directory with 18 updates

waihankan/DigitalBrain #30

8.18.2 → 8.18.3 Patch PR

Open about 5 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 20 updates

ananthakrishna7/ananthakrishna7.github.io #92

8.18.2 → 8.18.3 Patch PR

Open about 8 hours ago

chore(deps): bump the production-dependencies group across 1 directory with 19 updates

KWaloen/js-proposals #29

8.18.2 → 8.18.3 Patch PR

Open about 8 hours ago 1 comment

Bump ws in /gemini-client

hendisantika/springboot-vuejs-firebase #119

7.5.9 → 7.5.10 Patch PR

Merged about 10 hours ago

Bump ws and gatsby

brandonjurado/brandonjurado.github.io #46

6.2.1 → 6.2.3 Patch PR

Closed about 11 hours ago 1 comment

Bump ws

rosundfeld/ocr-rpg #29

5.2.2 → 5.2.4 Patch PR

Open about 17 hours ago

chore(deps): bump the npm_and_yarn group across 1 directory with 11 updates

mondaycom/vibe #3093

7.5.9 → 7.5.10 Patch PR

Open about 19 hours ago

Bump ws from 8.18.0 to 8.18.1 in /tgui in the npm_and_yarn group across 1 directory

dandykong/Paradise #2

8.18.0 → 8.18.1 Patch PR

Open about 21 hours ago

Bump the npm_and_yarn group across 1 directory with 25 updates

takemura95/vue-hcaptcha #1

5.2.3 → 5.2.4 Patch PR

Open 1 day ago

Bump ws from 6.2.2 to 6.2.3

Dmitry221060/Miyuko-Nonoe #18

6.2.2 → 6.2.3 Patch PR

Merged 1 day ago

chore(deps): bump the production-dependencies group with 20 updates

Elijer/garden2 #2

8.18.2 → 8.18.3 Patch PR

Open 1 day ago

chore(deps): Bump the dependencies group across 1 directory with 11 updates

pavel-petrenko/puppeteer #305

8.18.1 → 8.18.3 Patch PR

Open 1 day ago

Bump ws

kalispell-software-crafters/kalispell-software-crafters.github.io #109

6.2.2 → 6.2.3 Patch PR

Open 1 day ago

Bump ws and socket.io

TonyGregg/covid19spread #39

6.2.1 → 6.2.3 Patch PR

Merged 1 day ago

chore(deps): bump ws in /docs

Jaspero/web-components #387

7.5.9 → 7.5.10 Patch PR

Open 2 days ago

Bump ws from 5.2.2 to 5.2.4

sumonst21/ttag-cli #2

5.2.2 → 5.2.4 Patch PR

Open 2 days ago

chore(deps): bump ws

FantasticFiasco/recipes #97

7.5.9 → 7.5.10 Patch PR

Open 2 days ago

Bump the npm_and_yarn group across 1 directory with 21 updates

se2026/InstaPy #2

6.2.2 → 6.2.3 Patch PR

Merged 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/github-theme #24

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/brainhack #32

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/oreo #29

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/qlean #29

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/lesswrong #28

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/suddha #30

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/neo #26

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/dynamic-color #29

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the npm_and_yarn group across 7 directories with 33 updates

redstonedesigner/docusaurus #1

7.5.7 → 7.5.10 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/kurokula #23

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/oistnb #26

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/ribbons #16

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/adrenaline #29

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/simply-colorful #27

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/obsidian_vibrant #26

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/nordic #29

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/perso #31

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/mammoth #26

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/dekurai #33

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/simplicity #29

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/dark-graphite #25

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/faded #22

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/abyssal #28

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/githubdhc #30

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/jotter #29

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/arcane #27

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/neon-synthwave #31

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/yue #26

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/purple-aurora #26

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/duality #16

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

chore(deps): bump the production-dependencies group across 1 directory with 8 updates

quartz-themes/willemstad #27

8.18.2 → 8.18.3 Patch PR

Open 2 days ago

Package Details

Name:	`ws`
Ecosystem:	npm
PURL Type:	npm
Package URL:	`pkg:npm/ws`
JSON API:	View JSON

Security Advisories

5

Active advisories

HIGH 3

MODERATE 1

LOW 1

View All npm Advisories

Package Information

Description:

Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js

Repository:	https://github.com/websockets/ws
Homepage:	https://github.com/websockets/ws
Latest Release:	`8.18.2` 4 months ago
Dependent Repos:	900,116
Dependent Packages:	19,475
Downloads:	440,496,315
Ranking:	Top 0.0376% by dependent repos Top 0.0016% by downloads Top 0.0056% by dependent pkgs

PR Status

Open 7,949 (49.6%)

Merged 783 (4.9%)

Closed 5,089 (31.7%)

PR Types

Removal 6 (0.0%)

Minor 1,545 (9.6%)

Major 289 (1.8%)

Patch 11,961 (74.6%)