Skip to content

fix(security): Fix security issue in ws via minor version upgrade from 8.21.0 to 8.21.1 in typescript - #41

Open
aikido-autofix[bot] wants to merge 1 commit into
mainfrom
fix/aikido-security-update-packages-76265998-uks9
Open

fix(security): Fix security issue in ws via minor version upgrade from 8.21.0 to 8.21.1 in typescript#41
aikido-autofix[bot] wants to merge 1 commit into
mainfrom
fix/aikido-security-update-packages-76265998-uks9

Conversation

@aikido-autofix

Copy link
Copy Markdown

Upgrade ws to fix memory exhaustion DoS vulnerability where incomplete fragmented WebSocket messages exhaust heap memory via default configuration limits.

✅ 1 CVE resolved by this upgrade

This PR will resolve the following CVEs:

Issue Severity           Description
AIKIDO-2026-138234
HIGH
[ws] A remote attacker can send fragmented WebSocket frames with high default limits on fragment retention, causing excessive heap memory consumption and denial of service without completing the message or exceeding payload limits.

@aikido-autofix aikido-autofix Bot added the Aikido Label created by Aikido AutoFix label Jul 29, 2026
@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 94.09%. Comparing base (bc486a4) to head (26b45c7).

Additional details and impacted files
@@            Coverage Diff             @@
##             main      #41      +/-   ##
==========================================
- Coverage   94.37%   94.09%   -0.28%     
==========================================
  Files          43       27      -16     
  Lines        3325     2898     -427     
  Branches       44        0      -44     
==========================================
- Hits         3138     2727     -411     
+ Misses        187      171      -16     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Aikido Label created by Aikido AutoFix

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant