websockets
An implementation of the WebSocket Protocol (RFC 6455 & 7692)
88%
Total Score
healthy
Thirteen years of releases and active repository work support this release, with workflow pinning and a template-injection finding as the main concerns.
Health Score Breakdown
aaugustin made 107 of 111 commits in the last 3 months, or 96%, while four other contributors made one commit each.
The audit analyzed both workflows without failures and found all 17 action references unpinned, plus a high-confidence template-injection finding in .github/workflows/release.yml. The workflows have no pull_request_target or workflow_run triggers and no untrusted checkout or script-injection findings, so the audit does not show an active untrusted-trigger path.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-625161 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. websockets is vulnerable to Denial of Service (DoS) in versions 4.0 - 16.0. | 4.0 - 16.0 | Medium |
AIKIDO-2026-118856 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. websockets is vulnerable to Information Disclosure in versions 8.0 - 16.0. | 8.0 - 16.0 | Medium |
CVE-2021-33880 websockets is vulnerable to Observable Discrepancy in versions 0.0.0 - 9.1. | 0.0.0 - 9.1 | Medium |
CVE-2018-1000518 websockets is vulnerable to Uncontrolled Resource Consumption in versions 4.0 - 5.0. | 4.0 - 5.0 | High |
Package versions
| Version | Published | Vulnerabilities |
|---|---|---|
| 17.4 | 30 Oct 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 17.3 | 19 Oct 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 17.2 | 3 Oct 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 17.1 | 26 Aug 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 17.0.1 | 31 Jul 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 17.0 | 29 Jul 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 16.1.1 | 17 Jul 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 16.1 | 10 Jul 2026 | 0 0 critical, 0 total 0 0 high, 0 total 0 0 medium, 0 total 0 0 low, 0 total |
| 16.0 | 10 Jan 2026 | 0 0 critical, 2 total 0 0 high, 2 total 2 2 medium, 2 total 0 0 low, 2 total |
| 15.0.1 | 5 Mar 2025 | 0 0 critical, 2 total 0 0 high, 2 total 2 2 medium, 2 total 0 0 low, 2 total |
Maintainers
No maintainer information available.
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 10 days ago
- Created
- 12 years ago
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.