socketio vulnerabilities
11 published CVEs name socketio among the affected products.
- 11Published CVEs11 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical10 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-102599
Socket.IO: Engine.IO Protocol Revision Mismatch DoS
socketio · socket.io
High7.5 - CVE-2026-102600
Socket.IO: Prototype Pollution via Unsafe Client Session Lookup
socketio · socket.io
High7.5 - CVE-2026-69185
Socket.IO: Zero-attachment Memory Exhaustion
socketio · socket.io
High7.5 - CVE-2026-59725
Socket.IO: Engine.IO Polling Transport Connection Exhaustion
socketio · engine.io
High7.5 - CVE-2026-59724
Socket.IO: Engine.IO WebTransport SID DoS
socketio · socket.io
High7.5 - CVE-2026-33151
socket.io allows an unbounded number of binary attachments
socketio · socket.io
High8.7 - CVE-2024-38355
Unhandled 'error' event in socket.io
socketio · socket.io
High7.3 - CVE-2023-32695
Insufficient validation when decoding a Socket.IO packet
socketio · socket.io-parser
High7.3 - CVE-2023-31125
Uncaught exception in engine.io
socketio · engine.io
Medium6.5 - CVE-2022-41940
Uncaught exception in engine.io
socketio · engine.io
High7.1