By weakness (CWE)

CWE-1050: related vulnerabilities

CVEs classified under CWE-1050. Understanding the weakness class helps prioritize systemic fixes over one-off patches.

1 published vulnerability

• CVE-2026-48779HIGH 7.5

  The ws library, a widely-used WebSocket implementation for Node.js, contains a denial-of-service vulnerability that allows a remote attacker to crash an application by sending a carefully crafted stream of tiny data fragments. Despite the small individual packets, the server allocates internal memory structures for each fragment that far exceed the advertised message-size limits, eventually exhausting available memory and terminating the process. No authentication is required, and the attack traffic is modest, making this a practical threat for exposed WebSocket services.