Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: websockets/ws
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: 7.5.10
Choose a base ref
...
head repository: websockets/ws
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: 7.5.11
Choose a head ref
  • 2 commits
  • 8 files changed
  • 2 contributors

Commits on May 22, 2026

  1. [security] Limit retained message parts 

    Previously, the receiver could retain one `Buffer` entry per buffered
chunk or message fragment until enough data was parsed or the message
completed. A peer could use many tiny fragments/chunks and make retained
memory scale with retained part count rather than message payload size.

Add configurable `maxBufferedChunks` and `maxFragments` options to bound
the number of retained parts. When either limit is exceeded, emit
a `WS_ERR_TOO_MANY_BUFFERED_PARTS` error and close the connection with
close code 1008.

Signed-off-by: Nadav0077 <[email protected]>
    @Nadav0077 @lpinca
    Nadav0077 authored and lpinca committed May 22, 2026
    Configuration menu
    Copy the full SHA
    e14c458 View commit details
    Browse the repository at this point in the history

  2. [dist] 7.5.11

    @lpinca
    lpinca committed May 22, 2026
    Configuration menu
    Copy the full SHA
    fd36cd8 View commit details
    Browse the repository at this point in the history
Loading