Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/ws@8.15.1
Typenpm
Namespace
Namews
Version8.15.1
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version8.17.1
Latest_non_vulnerable_version8.20.1
Affected_by_vulnerabilities
0
url VCID-h7zx-ben4-tfhf
vulnerability_id VCID-h7zx-ben4-tfhf
summary ws is an open source WebSocket client and server for Node.js. A request with a number of headers exceeding theserver.maxHeadersCount threshold could be used to crash a ws server. The vulnerability was fixed in ws@8.17.1 (e55e510) and backported to ws@7.5.10 (22c2876), ws@6.2.3 (eeb76d3), and ws@5.2.4 (4abd8f6). In vulnerable versions of ws, the issue can be mitigated in the following ways: 1. Reduce the maximum allowed length of the request headers using the --max-http-header-size=size and/or the maxHeaderSize options so that no more headers than the server.maxHeadersCount limit can be sent. 2. Set server.maxHeadersCount to 0 so that no limit is applied.
references
0
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-37890.json
reference_id
reference_type
scores
0
value 5.9
scoring_system cvssv3
scoring_elements CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2024-37890.json
1
reference_url https://api.first.org/data/v1/epss?cve=CVE-2024-37890
reference_id
reference_type
scores
0
value 0.00541
scoring_system epss
scoring_elements 0.68178
published_at 2026-06-14T12:55:00Z
1
value 0.00541
scoring_system epss
scoring_elements 0.68168
published_at 2026-06-12T12:55:00Z
2
value 0.00541
scoring_system epss
scoring_elements 0.68079
published_at 2026-06-11T12:55:00Z
3
value 0.00541
scoring_system epss
scoring_elements 0.68181
published_at 2026-06-13T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2024-37890
2
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37890
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37890
3
reference_url https://github.com/websockets/ws
reference_id
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/websockets/ws
4
reference_url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1074236
reference_id 1074236
reference_type
scores
url https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1074236
5
reference_url https://github.com/websockets/ws/issues/2230
reference_id 2230
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-18T13:25:45Z/
url https://github.com/websockets/ws/issues/2230
6
reference_url https://github.com/websockets/ws/pull/2231
reference_id 2231
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-18T13:25:45Z/
url https://github.com/websockets/ws/pull/2231
7
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=2292777
reference_id 2292777
reference_type
scores
url https://bugzilla.redhat.com/show_bug.cgi?id=2292777
8
reference_url https://github.com/websockets/ws/commit/22c28763234aa75a7e1b76f5c01c181260d7917f
reference_id 22c28763234aa75a7e1b76f5c01c181260d7917f
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-18T13:25:45Z/
url https://github.com/websockets/ws/commit/22c28763234aa75a7e1b76f5c01c181260d7917f
9
reference_url https://github.com/websockets/ws/commit/4abd8f6de4b0b65ef80b3ff081989479ed93377e
reference_id 4abd8f6de4b0b65ef80b3ff081989479ed93377e
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-18T13:25:45Z/
url https://github.com/websockets/ws/commit/4abd8f6de4b0b65ef80b3ff081989479ed93377e
10
reference_url https://nvd.nist.gov/vuln/detail/CVE-2024-37890
reference_id CVE-2024-37890
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2024-37890
11
reference_url https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c
reference_id e55e5106f10fcbaac37cfa89759e4cc0d073a52c
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-18T13:25:45Z/
url https://github.com/websockets/ws/commit/e55e5106f10fcbaac37cfa89759e4cc0d073a52c
12
reference_url https://github.com/websockets/ws/commit/eeb76d313e2a00dd5247ca3597bba7877d064a63
reference_id eeb76d313e2a00dd5247ca3597bba7877d064a63
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
3
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-18T13:25:45Z/
url https://github.com/websockets/ws/commit/eeb76d313e2a00dd5247ca3597bba7877d064a63
13
reference_url https://github.com/advisories/GHSA-3h5v-q93c-6h6q
reference_id GHSA-3h5v-q93c-6h6q
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-3h5v-q93c-6h6q
14
reference_url https://github.com/websockets/ws/security/advisories/GHSA-3h5v-q93c-6h6q
reference_id GHSA-3h5v-q93c-6h6q
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
2
value 8.7
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
3
value HIGH
scoring_system generic_textual
scoring_elements
4
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-18T13:25:45Z/
url https://github.com/websockets/ws/security/advisories/GHSA-3h5v-q93c-6h6q
15
reference_url https://nodejs.org/api/http.html#servermaxheaderscount
reference_id http.html#servermaxheaderscount
reference_type
scores
0
value 7.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
1
value Track
scoring_system ssvc
scoring_elements SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2024-06-18T13:25:45Z/
url https://nodejs.org/api/http.html#servermaxheaderscount
16
reference_url https://access.redhat.com/errata/RHSA-2024:4591
reference_id RHSA-2024:4591
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:4591
17
reference_url https://access.redhat.com/errata/RHSA-2024:5547
reference_id RHSA-2024:5547
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:5547
18
reference_url https://access.redhat.com/errata/RHSA-2024:6755
reference_id RHSA-2024:6755
reference_type
scores
url https://access.redhat.com/errata/RHSA-2024:6755
19
reference_url https://access.redhat.com/errata/RHSA-2025:8544
reference_id RHSA-2025:8544
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8544
20
reference_url https://access.redhat.com/errata/RHSA-2025:8551
reference_id RHSA-2025:8551
reference_type
scores
url https://access.redhat.com/errata/RHSA-2025:8551
21
reference_url https://access.redhat.com/errata/RHSA-2026:3710
reference_id RHSA-2026:3710
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:3710
22
reference_url https://access.redhat.com/errata/RHSA-2026:3712
reference_id RHSA-2026:3712
reference_type
scores
url https://access.redhat.com/errata/RHSA-2026:3712
fixed_packages
0
url pkg:npm/ws@8.17.1
purl pkg:npm/ws@8.17.1
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/ws@8.17.1
aliases CVE-2024-37890, GHSA-3h5v-q93c-6h6q
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-h7zx-ben4-tfhf
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/ws@8.15.1