Skip to content
OpenAdvisories

Package · npm

@feathersjs/socketio

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2023-37899

    feathersjs socket handler allows abusing implicit toString

    Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. Feathers socket handler did not catch invalid string conversion errors like `const message = ${{ toString: '' }}` which would cause the NodeJS process to…

    feathersjs feathers @feathersjs/transport-commons @feathersjs/socketio npm