[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-45736":6},{"stargazers_count":4,"fetched_at":5},7,"2026-07-31T11:19:25.255Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":25,"aliases":35,"duplicate_of":9,"upstream":37,"downstream":38,"duplicates":51,"related":52,"reserved_at":9,"published_at":55,"modified_at":56,"state":57,"summary":58,"references_raw":66,"kevs":161,"epss":162,"epss_history":165,"metrics":316,"affected":330},"CVE-2026-45736","ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument. This vulnerability is fixed in 8.20.1.",null,[11,20],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-908","Use of Uninitialized Resource","The product uses or accesses a resource that has not been initialized.","weakness","Incomplete","Base","Medium",[],{"_key":21,"id":21,"name":22,"description":23,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":24},"CWE-824","Access of Uninitialized Pointer","The product accesses or uses a pointer that has not been initialized.",[],[26],{"_key":27,"name":28,"source":29,"url":30,"maturity":31,"reliability_score":32,"verified":33,"type":9,"platforms":34,"requires_auth":9,"exploitdb":9,"metasploit":9},"GITHUB_WEBSOCKETS_WS","Ws","github","https://github.com/websockets/ws/security/advisories/GHSA-6fc8-4gx4-v693","poc",0.3,false,[],[36],"GHSA-58qx-3vcg-4xpx",[],[39,41,43,45,47,49],{"_key":40},"DEBIAN-CVE-2026-45736",{"_key":42},"UBUNTU-CVE-2026-45736",{"_key":44},"RHSA-2026:26638",{"_key":46},"RHSA-2026:26994",{"_key":48},"RHSA-2026:27171",{"_key":50},"RHSA-2026:7655",[],[53],{"_key":54},"CGA-342G-4FMM-4XMF","2026-05-15T14:53:57.263Z","2026-07-22T12:08:45.065Z","Analyzed",{"cisa_kev":33,"cisa_ransomware":33,"cisa_vendor":9,"epss_severity":59,"epss_score":60,"severity":61,"severity_score":62,"severity_version":63,"severity_source":64,"severity_vector":65,"severity_status":57},"low",0.00717,"high",7.5,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",[67,78,83,88,93,99,104,109,113,117,121,125,129,133,137,141,145,149,153,157],{"url":68,"sources":69,"tags":72},"https://github.com/websockets/ws/security/advisories/GHSA-58qx-3vcg-4xpx",[70,64,71],"cve.org","osv_npm",[73,74,75,76,77],"X Refsource CONFIRM","WEB","Exploit","Patch","Vendor Advisory",{"url":79,"sources":80,"tags":81},"https://github.com/websockets/ws/commit/c0327ec15a54d701eb6ccefaa8bef328cfc03086",[70,64,71],[82,74,76],"X Refsource MISC",{"url":84,"sources":85,"tags":86},"https://nvd.nist.gov/vuln/detail/CVE-2026-45736",[71],[87],"Advisory",{"url":89,"sources":90,"tags":91},"https://github.com/websockets/ws",[71],[92],"PACKAGE",{"url":94,"sources":95,"tags":96},"https://access.redhat.com/security/cve/CVE-2026-45736",[70],[97,98],"VDB Entry","X Refsource REDHAT",{"url":100,"sources":101,"tags":102},"https://bugzilla.redhat.com/show_bug.cgi?id=2477914",[70],[103,98],"Issue Tracking",{"url":105,"sources":106,"tags":107},"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-45736.json",[70],[108],"X Sadp Csaf Vex",{"url":110,"sources":111,"tags":112},"https://access.redhat.com/errata/RHSA-2026:29197",[70],[77,98],{"url":114,"sources":115,"tags":116},"https://access.redhat.com/errata/RHSA-2026:26638",[70],[77,98],{"url":118,"sources":119,"tags":120},"https://access.redhat.com/errata/RHSA-2026:26994",[70],[77,98],{"url":122,"sources":123,"tags":124},"https://access.redhat.com/errata/RHSA-2026:27171",[70],[77,98],{"url":126,"sources":127,"tags":128},"https://access.redhat.com/errata/RHSA-2026:7655",[70],[77,98],{"url":130,"sources":131,"tags":132},"https://access.redhat.com/errata/RHSA-2026:34374",[70],[77,98],{"url":134,"sources":135,"tags":136},"https://access.redhat.com/errata/RHSA-2026:33574",[70],[77,98],{"url":138,"sources":139,"tags":140},"https://access.redhat.com/errata/RHSA-2026:36754",[70],[77,98],{"url":142,"sources":143,"tags":144},"https://access.redhat.com/errata/RHSA-2026:36820",[70],[77,98],{"url":146,"sources":147,"tags":148},"https://access.redhat.com/errata/RHSA-2026:37272",[70],[77,98],{"url":150,"sources":151,"tags":152},"https://access.redhat.com/errata/RHSA-2026:41928",[70],[77,98],{"url":154,"sources":155,"tags":156},"https://access.redhat.com/errata/RHSA-2026:40792",[70],[77,98],{"url":158,"sources":159,"tags":160},"https://access.redhat.com/errata/RHSA-2026:40768",[70],[77,98],[],{"date":163,"score":60,"percentile":164},"2026-07-05",0.49343,[166,170,173,176,179,182,186,189,192,195,198,201,204,207,210,213,216,218,220,223,226,229,232,235,238,241,244,247,249,251,254,258,261,264,267,270,273,276,279,282,285,288,291,294,297,300,303,306,309,312,315],{"date":167,"score":168,"percentile":169},"2026-05-16",0.00009,0.00845,{"date":171,"score":168,"percentile":172},"2026-05-17",0.00844,{"date":174,"score":168,"percentile":175},"2026-05-18",0.00837,{"date":177,"score":168,"percentile":178},"2026-05-19",0.00835,{"date":180,"score":168,"percentile":181},"2026-05-20",0.00961,{"date":183,"score":184,"percentile":185},"2026-05-21",0.00012,0.01733,{"date":187,"score":184,"percentile":188},"2026-05-22",0.01856,{"date":190,"score":184,"percentile":191},"2026-05-23",0.01853,{"date":193,"score":184,"percentile":194},"2026-05-24",0.01851,{"date":196,"score":184,"percentile":197},"2026-05-25",0.01839,{"date":199,"score":184,"percentile":200},"2026-05-26",0.01832,{"date":202,"score":184,"percentile":203},"2026-05-27",0.01847,{"date":205,"score":184,"percentile":206},"2026-05-28",0.01842,{"date":208,"score":184,"percentile":209},"2026-05-29",0.01852,{"date":211,"score":184,"percentile":212},"2026-05-30",0.01875,{"date":214,"score":184,"percentile":215},"2026-05-31",0.01868,{"date":217,"score":184,"percentile":209},"2026-06-01",{"date":219,"score":184,"percentile":197},"2026-06-02",{"date":221,"score":184,"percentile":222},"2026-06-03",0.01823,{"date":224,"score":184,"percentile":225},"2026-06-04",0.0182,{"date":227,"score":184,"percentile":228},"2026-06-05",0.01835,{"date":230,"score":184,"percentile":231},"2026-06-06",0.0184,{"date":233,"score":184,"percentile":234},"2026-06-07",0.01833,{"date":236,"score":184,"percentile":237},"2026-06-08",0.01822,{"date":239,"score":184,"percentile":240},"2026-06-09",0.01815,{"date":242,"score":184,"percentile":243},"2026-06-10",0.01813,{"date":245,"score":184,"percentile":246},"2026-06-11",0.01819,{"date":248,"score":184,"percentile":237},"2026-06-12",{"date":250,"score":184,"percentile":237},"2026-06-13",{"date":252,"score":184,"percentile":253},"2026-06-14",0.01829,{"date":255,"score":256,"percentile":257},"2026-06-15",0.00473,0.37044,{"date":259,"score":256,"percentile":260},"2026-06-16",0.371,{"date":262,"score":256,"percentile":263},"2026-06-17",0.37151,{"date":265,"score":256,"percentile":266},"2026-06-18",0.37211,{"date":268,"score":256,"percentile":269},"2026-06-19",0.372,{"date":271,"score":256,"percentile":272},"2026-06-20",0.3719,{"date":274,"score":256,"percentile":275},"2026-06-21",0.37176,{"date":277,"score":256,"percentile":278},"2026-06-22",0.37167,{"date":280,"score":256,"percentile":281},"2026-06-23",0.37244,{"date":283,"score":256,"percentile":284},"2026-06-24",0.37282,{"date":286,"score":256,"percentile":287},"2026-06-25",0.3736,{"date":289,"score":256,"percentile":290},"2026-06-26",0.374,{"date":292,"score":256,"percentile":293},"2026-06-27",0.37442,{"date":295,"score":256,"percentile":296},"2026-06-28",0.37424,{"date":298,"score":256,"percentile":299},"2026-06-29",0.37429,{"date":301,"score":60,"percentile":302},"2026-06-30",0.49168,{"date":304,"score":60,"percentile":305},"2026-07-01",0.49255,{"date":307,"score":60,"percentile":308},"2026-07-02",0.49293,{"date":310,"score":60,"percentile":311},"2026-07-03",0.49308,{"date":313,"score":60,"percentile":314},"2026-07-04",0.49334,{"date":163,"score":60,"percentile":164},[317,324,328],{"source":70,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":318,"cvss_v4_0":9},{"baseScore":319,"baseSeverity":320,"vectorString":321,"impactScore":322,"exploitabilityScore":323},4.4,"MEDIUM","CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N",6,1.8,{"source":64,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":325,"cvss_v4_0":9},{"baseScore":62,"baseSeverity":326,"vectorString":65,"impactScore":322,"exploitabilityScore":327},"HIGH",10,{"source":71,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":329,"cvss_v4_0":9},{"baseScore":319,"baseSeverity":9,"vectorString":321,"impactScore":322,"exploitabilityScore":323},[331,344,350],{"ecosystem":332,"name":333,"vendor":332,"product":333,"cpe_part":9,"purl_type":334,"purl_namespace":9,"purl_name":333,"source":9,"versions":335},"Npm","ws","npm",[336],{"version":337,"is_range":338,"range_type":339,"version_start":340,"version_start_type":341,"version_end":342,"version_end_type":343,"fixed_in":9},"gte8_0_0_lt8_20_1",true,"semver","8.0.0","including","8.20.1","excluding",{"ecosystem":9,"name":333,"vendor":345,"product":333,"cpe_part":346,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":347},"websockets","a",[348],{"version":349,"is_range":338,"range_type":70,"version_start":340,"version_start_type":341,"version_end":342,"version_end_type":343,"fixed_in":9},">= 8.0.0, \u003C 8.20.1",{"ecosystem":9,"name":333,"vendor":351,"product":333,"cpe_part":346,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":352},"ws_project",[353],{"version":354,"is_range":338,"range_type":355,"version_start":340,"version_start_type":341,"version_end":342,"version_end_type":343,"fixed_in":9},"gte8.0.0_lt8.20.1","cpe"]