Skip to content
Threat Feed
Subscribe

Product

Websocket-Driver (< 0.7.5)

1 brief RSS
medium advisory

Message Corruption Vulnerability in websocket-driver Library (CVE-2026-54466)

A critical vulnerability, CVE-2026-54466, in the `websocket-driver` npm library allows remote attackers to cause message corruption by sending specially crafted WebSocket frames that exploit improper handling of the protocol's length header, leading to incorrect parsing of subsequent payload data.

websocket-driver vulnerability websocket npm message-corruption