SO
Product
Socket.io-parser
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 0Low 0
Watch
Add Socket.io-parser to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-33151 | 7.5 | Mar 20 | socket.io allows an unbounded number of binary attachments Affected: before 3.3.5; 3.4.0 before 3.4.4; 4.0.0 before 4.2.6 |
| CVE-2023-32695 | 7.5 | May 27 | Insufficient validation when decoding a Socket.IO packet Affected: 3.4.0 before 3.4.3; 4.0.4 before 4.2.3 |
| CVE-2020-36049 | 7.5 | Jan 8 | socket.io-parser before 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large packet because a concatenation approach is used Affected: before 3.4.1 |
Showing 3