AIKIDO-2025-10111
@hono/node-ws is vulnerable to Resource Leak
35
Low Risk
This Affects:
@hono/node-wsTL;DR
Affected versions of the package suffer from resource leaks due to a flaw in WebSocket connection handling. WebSocket connections remain open indefinitely, even when the application does not expect them. As a result, these unintended connections can consume system resources, potentially leading to performance degradation and other unintended behavior.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
@hono/node-ws is vulnerable to Resource Leak in versions 1.0.2 - 1.0.8.
How to fix this
Upgrade the @hono/node-ws library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant