VYPR
High severity7.5NVD Advisory· Published Jun 26, 2018· Updated Jun 17, 2026

CVE-2018-1000518

CVE-2018-1000518

Description

aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in 5.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
websocketsPyPI
>= 4.0, < 5.05.0

Affected products

200

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.