Aaugustin · Uwebsockets · CVE-2018-1000518
**Name of the Vulnerable Software and Affected Versions**
aaugustin websockets versions 4.0 through 4.0
**Description**
The issue is related to improper handling of highly compressed data, which can result in Denial of Service by memory exhaustion. This can be exploited by sending a specially crafted frame on an established connection. The vulnerability appears to have been fixed in version 5.
**Recommendations**
For version 4, update to version 5 to resolve the issue.
As a temporary workaround, consider configuring the websockets library with compression=None to prevent exploitation.