Skip to content

CVE lookup

CVE-2026-54466

Pruva has a verified reproduction for CVE-2026-54466: websocket-driver: message corruption via abuse of draft-WebSocket length headers. The canonical evidence record is REPRO-2026-00292.

REPRO

REPRO-2026-00292

Package

faye/websocket-driver-node · npm

Severity

CRITICAL

Status

published