Uws Node Module
Approved changes feed: RSS · Atom
cpe:2.3:a:hackerone:uws_node_module:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Hackerone (9b72fff1-532f-502a-8030-14fc4a21dd17) |
|---|---|
| Product | Uws Node Module (4af2e8a4-8bbc-5236-86c3-945eb063d10e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2016-10544 |
vulnerable | 2026-06-08 05:07:25.292846 |
Details available
uws is a WebSocket server library. By sending a 256mb websocket message to a uws server instance with permessage-deflate enabled, there is a possibility used compression will shrink said 256mb down to less than 16mb of websocket payload which passes the length check of 16mb payload. This data will then inflate up to 256mb and crash the node process by exceeding V8's maximum string size. This affects uws >=0.10.0 <=0.10.8.
Published: 2018-05-31T20:00:00.000Z
Updated: 2024-09-17T02:56:54.139Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.