Skip to content
OpenAdvisories

Product · HackerOne

engine.io-client node module

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2016-10536

    Insecure Defaults Allow MITM Over TLS in engine.io-client

    engine.io-client is the client for engine.io, the implementation of a transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. The vulnerability is related to the way that node.js handles the `rejectUnauthorized` setting. I…

    HackerOne engine.io-client node module engine.io-client npm