Skip to content
OpenAdvisories

Package · npm

engine.io-client

1 known vulnerabilities.

1 result · Feed

  • Medium 5.9

    Insecure Defaults Allow MITM Over TLS in engine.io-client

    engine.io-client is the client for engine.io, the implementation of a transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. The vulnerability is related to the way that node.js handles the `rejectUnauthorized` setting. I…