Weave.js
Changelog/5.x versions

v5.1.1

Security bugfixes for WebSockets and Azure Web Pubsub stores

Metadata

  • Release date: 2026-06-22

Fixed

  • #1114 Security: verify Azure Web PubSub ce-signature HMAC-SHA256 and enforce allowedEndpoints on incoming CloudEvents POST requests (store-azure-web-pubsub)
  • #1116 A single WebSocket close can disable room persistence
  • #1118 Denied WebSocket upgrades return without closing sockets

On this page