Login Request a demo
SO
Product
Socket.io-parser
by Socket · last CVE Mar 20, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 3Medium 0Low 0
Severity
All severities4Critical1High3Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Socket.io-parser to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-2421
9.8
2%
Oct 25
Socket.io - Improper type validation in attachment parsing
Affected: before 3.3.3; 3.4.0 before 3.4.2; 4.0.0 before 4.0.5; 4.1.0 before 4.2.1
CVE-2026-33151
7.5
1%
Mar 20
socket.io allows an unbounded number of binary attachments
Affected: before 3.3.5; 3.4.0 before 3.4.4; 4.0.0 before 4.2.6
CVE-2023-32695
7.5
1%
May 27
Insufficient validation when decoding a Socket.IO packet
Affected: 3.4.0 before 3.4.3; 4.0.4 before 4.2.3
CVE-2020-36049
7.5
3%
Jan 8
socket.io-parser before 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large packet because a concatenation approach is used
Affected: before 3.4.1
Showing 4