SO
Product
socket.io
6
CVEs
0
On KEV
7.5
Max CVSS
1
New 30D
Severity mix
Critical 0High 6Medium 0Low 0
Watch
Add socket.io to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102599 | 7.5 | Oct 13 | Socket.IO: Engine.IO Protocol Revision Mismatch DoS Affected: >= 6.6.0, < 6.6.10 |
| CVE-2026-102600 | 7.5 | Sep 29 | Socket.IO: Prototype Pollution via Unsafe Client Session Lookup Affected: < 0.1.1 |
| CVE-2026-69185 | 7.5 | Aug 3 | Socket.IO: Zero-attachment Memory Exhaustion Affected: < 3.3.6; >= 3.4.0, < 3.4.5; >= 4.0.0, < 4.2.7 |
| CVE-2026-59724 | 7.5 | Jul 8 | Socket.IO: Engine.IO WebTransport SID DoS Affected: >= 6.5.0, < 6.6.7 |
| CVE-2026-33151 | 7.5 | Mar 20 | socket.io allows an unbounded number of binary attachments Affected: < 3.3.5; >= 3.4.0, < 3.4.4; >= 4.0.0, < 4.2.6 |
| CVE-2024-38355 | 7.3 | Jun 19 | Unhandled 'error' event in socket.io Affected: < 2.5.1; >= 3.0.0,< 4.6.2 |
Showing 6