Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
websocket-driver could let attackers run code
published 3 months ago
Summary
The websocket-driver components used in your applications have been updated to stop attackers from injecting and executing malicious code. The fix is included in version 0.6.5‑tuxcare.1. Update the affected packages (jcoglan/websocket-driver, websocket-driver-node, websocket-driver) to this version as soon as possible.
What to do
- Update jcoglan websocket-driver to version 0.6.5-tuxcare.1.
- Update websocket-driver-node to version 0.6.5-tuxcare.1.
- Update websocket-driver to version 0.6.5-tuxcare.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:npm | jcoglan | websocket-driver |
< 0.6.5-tuxcare.1 Fix: upgrade to 0.6.5-tuxcare.1
|
| TuxCare:npm | – | websocket-driver-node |
< 0.6.5-tuxcare.1 Fix: upgrade to 0.6.5-tuxcare.1
|
| TuxCare:npm | – | websocket-driver |
>= 0.6.5-tuxcare.0, < 0.6.5-tuxcare.1 Fix: upgrade to 0.6.5-tuxcare.1
|
Original advisory text
TuxCare security update for websocket-driver (2 CVEs)
TuxCare rebuilt websocket-driver to address 2 CVEs. Fixed in 0.6.5-tuxcare.1.
Timeline
Published4 Aug 2026
Updated30 Oct 2026
First seen30 Sep 2026
Sources
CLSA-2026-1784856035 · OSV
Track software like this
Free during beta