ws is an open source WebSocket client and server for Node.js. Prior to 8.20.1, the websocket.close() implementation is vulnerable to uninitialized memory disclosure when a TypedArray is passed as the reason argument. This vulnerability is fixed in 8.20.1.
0.7.2+ds1.349b7460-11.0.1+ds1.e6ddaae4-11.1.0+ds1.e6ddaae4-3build11.1.0+ds1.e6ddaae4-3ubuntu11.1.0+ds1.e6ddaae4-57.2.1-27.2.1-37.4.2+~cs18.0.8-27.5.5+~cs13.0.13-18.5.0+~cs13.3.3-28.11.0+~cs13.7.3-18.11.0+~cs13.7.3-28.18.0+~cs14.5.15-18.18.1+~cs14.18.2-18.18.1+~cs14.18.2-18.19.0+~cs14.19.1-1Exploitability
AV:NAC:HPR:HUI:NScope
S:UImpact
C:HI:NA:NCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N