Homepage

Resource Exhaustion The advisory has been revoked - it doesn't affect any version of package tensorflow-cpu-jupyter  (opens in a new tab)

Threat Intelligence

EPSS
1.43% (73rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-WOLFILATEST-TENSORFLOWCPUJUPYTER-17984944
  • published16 Jul 2026
  • disclosed17 Jun 2026
Report a new vulnerability Found a mistake?

Introduced: 17 Jun 2026

CVE-2026-48779  (opens in a new tab)
CWE-400  (opens in a new tab)
CWE-770  (opens in a new tab)

Amendment

The Wolfi security team deemed this advisory irrelevant for Wolfi:latest.

NVD Description

Note: Versions mentioned in the description apply only to the upstream tensorflow-cpu-jupyter package and not the tensorflow-cpu-jupyter package as distributed by Wolfi.

ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up to 7.5.11, and from 8.0.0 up to 8.21.0 are affected by a memory exhaustion DoS vulnerability. A peer can send a high volume of exceptionally small fragments and data chunks, with modest network traffic, to force the remote peer into allocating and holding structural wrappers that consume far more memory than the default documented message-size limit, leading to process termination due to OOM. This issue has been fixed in versions 5.2.5, 6.2.4, 7.5.11, and 8.21.0.

References