ECHO-e462-125f-31d5
See a problem?- Import Source
- https://advisory.echohq.com/osv/ECHO-e462-125f-31d5.json
- JSON Data
- https://api.osv.dev/v1/vulns/ECHO-e462-125f-31d5
- Upstream
- CVE-2026-83745
- Withdrawn
- 2026-10-05T18:43:47Z
- Published
- 2026-10-03T09:20:14Z
- Modified
- 2026-10-05T19:30:54Z
- Summary
- Node.js and D only: the WebSocket frame decoders allocate the declared payload length before the bytes arrive. Built with --without-nodejs, and no D compiler is in Build-Depends, so neither binding is built or packaged. The C++ WebSocket server is a separate code path, covered by CVE-2026-92834.
- Details
- References