Skip to content
OpenAdvisories

Package · npm

sockjs

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2020-7693 Public exploit

    Denial of Service (DoS)

    Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.

    sockjs npm
  • Medium 6.1
    CVE-2020-8823

    Cross-site scripting in SocksJS-node

    htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka callback) parameter.

    sockjs npm