CVE-2026-54464: Ruby Websocket Driver Missing Size Check
Missing bounds check on the decompressed WebSocket message payload size. This can allow an attacker to bypass frame size checks and cause excessive memory allocation, leading to DoS. Ensure the size of the decompressed message is checked against the configured limit.
Rubygreprules fetch cve-2026-54464-ruby-websocket-driver-missing-size-check --engine opengrepDescription
Missing bounds check on the decompressed WebSocket message payload size. This can allow an attacker to bypass frame size checks and cause excessive memory allocation, leading to DoS. Ensure the size of the decompressed message is checked against the configured limit.
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.