Skip to content

ws affected by a DoS when handling a request with many HTTP headers #45108

Closed
Closed
ws affected by a DoS when handling a request with many HTTP headers#45108
Labels
Help Wanted :octocat:Issues ideal for external contributors.🌐NetworkingRelated to a networking API.

Description

@pranshuchittora
pranshuchittora
opened on Jun 21, 2024

Description

ws affected by a DoS when handling a request with many HTTP headers
GHSA-3h5v-q93c-6h6q

Solution

Bump WS
https://github.com/facebook/react-native/blob/main/packages/react-native/package.json#L147

Steps to reproduce

NA

React Native Version

Affected Platforms

Other (please specify)

Output of npx react-native info

NA

Stacktrace or Logs

NA

Reproducer

NA

Screenshots and Videos

No response

Activity

  1. pranshuchittora
    added
    Needs: Triage 🔍
    on Jun 21, 2024
  2. github-actions
    added
    Needs: Version Info
    on Jun 21, 2024

  3. github-actions commented on Jun 21, 2024

    @github-actions
    github-actionsbot
    on Jun 21, 2024 – with GitHub Actions
    ⚠️ Add or Reformat Version Info
    ℹ️ We could not find or parse the version number of React Native in your issue report. Please use the template, and report your version including major, minor, and patch numbers - e.g. 0.70.2
  4. github-actions
    added
    Needs: Author Feedback
    🌐NetworkingRelated to a networking API.
    Needs: ReproThis issue could be improved with a clear list of steps to reproduce the issue.
    and removed
    Needs: Triage 🔍
    on Jun 21, 2024

  5. github-actions commented on Jun 21, 2024

    @github-actions
    github-actionsbot
    on Jun 21, 2024 – with GitHub Actions
    ⚠️ Missing Reproducible Example
    ℹ️ We could not detect a reproducible example in your issue report. Please provide either:
    • If your bug is UI related: a Snack
    • If your bug is build/update related: use our Reproducer Template. A reproducer needs to be in a GitHub repository under your username.

  6. cortinico commented on Jun 22, 2024

    @cortinico
    cortinico
    on Jun 22, 2024
    Contributor

    Bump WS main/packages/react-native/package.json#L147

    The dependency is already using the caret:
    https://github.com/facebook/react-native/blob/f7fe68861a52a0428698a9352d39a6e39afefe42/packages/react-native/package.json#L147

    So you will be pulling in a patched version of ws when you yarn/npm install.

    Anyway, if you wish to bump the base package version, feel free to send a PR.

  7. cortinico
    added
    Help Wanted :octocat:Issues ideal for external contributors.
    and removed
    Needs: Author Feedback
    Needs: ReproThis issue could be improved with a clear list of steps to reproduce the issue.
    Needs: Version Info
    on Jun 22, 2024

  8. cortinico commented on Jun 4, 2026

    @cortinico
    cortinico
    on Jun 4, 2026
    Contributor

    See:

  9. cortinico
    closed this as completedon Jun 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    Help Wanted :octocat:Issues ideal for external contributors.🌐NetworkingRelated to a networking API.

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions