Tag
websocket
Safeguard articles tagged "websocket" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Open Source
npm ws Security: Fixing the CVE-2024-37890 WebSocket DoS
The npm ws package powers most Node WebSocket servers. CVE-2024-37890 let a flood of request headers crash it. Here is how the flaw works and how to patch.
Aug 22, 20255 min read
Application Security
WebSocket Security in Modern Applications
WebSockets enable real-time communication but introduce attack surfaces that traditional HTTP security controls miss entirely.
Apr 8, 20245 min read