Skip to content
Socket vulnerabilities
Newest
-
socket firewall
Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0.0 does not...
CVE-2026-90651
8.1 High
-
socket engine.io
Socket.IO: Engine.IO Polling Transport Connection Exhaustion
CVE-2026-59725
Fix available
7.5 High
-
socket engine.io, socketio socket.io +1 more
Socket.IO: Engine.IO WebTransport SID DoS
CVE-2026-59724
Fix available
7.5 High
-
socketio socket.io, socket socket.io-parser +1 more
socket.io allows an unbounded number of binary attachments
CVE-2026-33151
Fix available
8.7 High
-
socket socket.io
Unhandled 'error' event in socket.io
CVE-2024-38355
Public exploitFix available
7.3 High
-
socket socket.io-parser
Insufficient validation when decoding a Socket.IO packet
CVE-2023-32695
Fix available
7.3 High
-
socket engine.io
Uncaught exception in engine.io
CVE-2023-31125
Fix available
6.5 Medium
-
socket engine.io
Uncaught exception in engine.io
CVE-2022-41940
Fix available
7.1 High
-
socket socket.io-parser
Socket.io - Improper type validation in attachment parsing
CVE-2022-2421
Fix available
10.0 Critical
-
socket socket.io-client java
NULL Pointer Dereference
CVE-2022-25867
Fix available
7.5 High
-
socket engine.io
Uncaught Exception in engine.io
CVE-2022-21676
Fix available
7.5 High
-
socket socket.io
Insecure Defaults
CVE-2020-28481
Fix available
5.3 Medium
-
socket engine.io
Resource exhaustion in engine.io
CVE-2020-36048
Fix available
7.5 High
-
socket socket.io-parser
Resource exhaustion in socket.io-parser
CVE-2020-36049
Fix available
7.5 High
-
socket socket.io, hackerone socket.io node module +1 more
Insecure randomness in socket.io
CVE-2017-16031
Fix available
7.5 High
-
socket engine.io-client, hackerone engine.io-client node module +1 more
Insecure Defaults Allow MITM Over TLS in engine.io-client
CVE-2016-10536
Fix available
5.9 Medium