-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| deno | rust | < 1.31.0 | 1.31.0 |
The vulnerability was explicitly tied to regex usage in upgradeWebSocket as shown in the commit diff. The original code used StringPrototypeSplit(upgrade, /\s*,\s*/) which was replaced with a safer comma split + trim pattern. The CWE-1333 classification and advisory descriptions directly match this pattern of inefficient regex usage in header processing.
Ongoing coverage of React2Shell