Skip to content
OpenAdvisories

Product · @socket.io

Socket.io-Parser

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2022-2421

    Socket.io - Improper type validation in attachment parsing

    Due to improper type validation in attachment parsing the Socket.io js library, it is possible to overwrite the _placeholder object which allows an attacker to place references to functions at arbitrary places in the resulting query object.

    @socket.io Socket.io-Parser socket.io-parser npm