VIR Vulnerability Intelligence Relay

CVE-2024-37890

high
Published 2024-06-17 · Modified 2026-05-13
CVSS v3
—
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v2
—
VIR risk
8.0

Description

ws affected by a DoS when handling a request with many HTTP headers

Predictions

Exploit likelihood
30%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2024-37890

OS impact
OSVersionStatusFixed in
debian debianbookwormaffected
debian debianbullseyeaffected
debian debianforkyfixed8.18.0+~cs13.7.11-1
debian debiansidfixed8.18.0+~cs13.7.11-1
debian debiantrixiefixed8.18.0+~cs13.7.11-1

Package impact
EcosystemPackageVulnerableFixed
npm npmws>=2.1.0,<5.2.45.2.4
npm npmws>=6.0.0,<6.2.36.2.3
npm npmws>=7.0.0,<7.5.107.5.10
npm npmws>=8.0.0,<8.17.18.17.1
npm NPMws>= 8.0.0, < 8.17.18.17.1
npm NPMws>= 7.0.0, < 7.5.107.5.10
npm NPMws>= 6.0.0, < 6.2.36.2.3
npm NPMws>= 2.1.0, < 5.2.45.2.4

References

Verify integrity in audit chain (admin only). AS-IS.