CVE-2026-62389 - ws < 8.21.1 Default maxFragments Allows Memory Exhaustion DoS
CVE ID :CVE-2026-62389 Published : July 15, 2026, 6:16 p.m. | 17 minutes ago Description :ws before 8.21.1 contains a memory exhaustion vulnerability in lib/receiver.js where the fragment guard only triggers when fragment count reaches maxFragments, allowing attackers to exhaust memory by...