Skip to content
OpenAdvisories

Package · PyPI

python-socketio

2 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Feed

  • High 7.5
    CVE-2026-48804

    python-socketio: Binary attachment accumulation can cause denial of service

    python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary `EVENT` and `ACK` messages in memory while it waits to receive their binary attachments. Once all the attachments are received, th…

    miguelgrinberg python-socketio python-socketio python-socketio Debian Ubuntu PyPI
  • Medium 6.4
    CVE-2025-61765

    python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments

    python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserializatio…

    miguelgrinberg python-socketio python-socketio python-socketio Debian Ubuntu PyPI