Skip to content
OpenAdvisories

Vendor

@socket.io

2 known vulnerabilities.

Products

Socket.io-Parser 1 cluster-engine 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2022-2421

    Socket.io - Improper type validation in attachment parsing

    Due to improper type validation in attachment parsing the Socket.io js library, it is possible to overwrite the _placeholder object which allows an attacker to place references to functions at arbitrary places in the resulting query object.

    @socket.io Socket.io-Parser socket.io-parser npm