Websocket
2 articles
CVEHeadroom
CVE-2026-71416: Headroom WebSocket proxy spends your OpenAI key for any reachable browser
How to fix CVE-2026-71416: upgrade headroom-ai to 0.35.0
HOL GuardCVEUndici
CVE-2026-85024: undici WebSocket deflate bug can crash the Node process
How to fix CVE-2026-85024: upgrade undici to 8.10.2 (or 7.29.1 / 6.28.1 on older trains)
HOL GuardRelated topics
Keep exploring
The engineering desk continues across the ecosystem: security research on shipping agents safely, and plugins that put the standards to work.