https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T19:35:39.278268+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-45736 CVE-2026-45736 — ws: Uninitialized memory disclosure 2026-09-28T19:35:39.281075+00:00

Affected: websockets ws, Red Hat Cryostat 4 on RHEL 9, Red Hat AMQ Broker 7.13.6, Red Hat AMQ Broker 7.14.1, Red Hat Enterprise Linux 10, Red Hat Ansible Automation Platform 2.6, Red Hat Developer Hub 1.10, Red Hat Developer Hub 1.9, Red Hat Discovery 2, Red Hat Hardened Images and 40 more

ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument. This vulnerability is fixed in 8.20.1.