Skip to content
OpenAdvisories

Vendor

socketio

11 known vulnerabilities.

Products

socket.io 6 engine.io 4 socket.io-parser 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.3
    CVE-2024-38355 Public exploit

    Unhandled 'error' event in socket.io

    Socket.IO is an open source, real-time, bidirectional, event-based, communication framework. A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. This issue is fixed by commit `15af2…

    socketio socket.io socket.io npm