diff --git a/app/handle-websocket.go b/app/handle-websocket.go
index 2cb3bac..34bb9f1 100644
--- a/app/handle-websocket.go
+++ b/app/handle-websocket.go
@@ -100,8 +100,10 @@ whitelist:
 	var conn *websocket.Conn
 
 	// Configure upgrader for this connection
-	upgrader.ReadBufferSize = int(DefaultMaxMessageSize)
-	upgrader.WriteBufferSize = int(DefaultMaxMessageSize)
+	// Use reasonable buffer sizes (64KB) instead of max message size (10MB)
+	// to prevent memory exhaustion with many connections
+	upgrader.ReadBufferSize = 64 * 1024  // 64KB
+	upgrader.WriteBufferSize = 64 * 1024 // 64KB
 
 	if conn, err = upgrader.Upgrade(w, r, nil); chk.E(err) {
 		log.E.F("websocket accept failed from %s: %v", remote, err)
diff --git a/pkg/version/version b/pkg/version/version
index ff37c8e..5714657 100644
--- a/pkg/version/version
+++ b/pkg/version/version
@@ -1 +1 @@
-v0.52.11
+v0.52.12