Socket Socket.io vulnerabilities

• socketio socket.io, socket socket.io-parser +1 more socket.io allows an unbounded number of binary attachments CVE-2026-33151 Fix available 8.7 HighMarch 18, 2026
• socket socket.io Unhandled 'error' event in socket.io CVE-2024-38355 Public exploitFix available 7.3 HighJune 19, 2024
• socket socket.io-parser Insufficient validation when decoding a Socket.IO packet CVE-2023-32695 Fix available 7.3 HighMay 23, 2023
• socket socket.io-parser Socket.io - Improper type validation in attachment parsing CVE-2022-2421 Fix available 10.0 CriticalOctober 25, 2022
• socket socket.io-client java NULL Pointer Dereference CVE-2022-25867 Fix available 7.5 HighAugust 2, 2022
• socket socket.io Insecure Defaults CVE-2020-28481 Fix available 5.3 MediumJanuary 19, 2021
• socket socket.io-parser Resource exhaustion in socket.io-parser CVE-2020-36049 Fix available 7.5 HighJanuary 7, 2021
• socket socket.io, hackerone socket.io node module +1 more Insecure randomness in socket.io CVE-2017-16031 Fix available 7.5 HighJune 4, 2018