Tag

npm-ws

Safeguard articles tagged "npm-ws" — guides, analysis, and best practices for software supply chain and application security.

1 article

Open Source

npm ws Security: Fixing the CVE-2024-37890 WebSocket DoS

The npm ws package powers most Node WebSocket servers. CVE-2024-37890 let a flood of request headers crash it. Here is how the flaw works and how to patch.

Aug 22, 20255 min read