Login Request a demo
EN
Product
Engine.io
by Socket · last CVE Jul 8, 2026
6
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 0High 4Medium 2Low 0
Severity
All severities6Critical0High4Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Engine.io to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-59725
7.5
1%
Jul 8
Socket.IO: Engine.IO Polling Transport Connection Exhaustion
Affected: 4.1.0 before 6.6.7
CVE-2026-59724
7.5
1%
Jul 8
Socket.IO: Engine.IO WebTransport SID DoS
Affected: 6.5.0 before 6.6.7
CVE-2022-21676
7.5
3%
Jan 12
Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO
Affected: 4.0.0 before 4.1.2; 5.0.0 before 5.2.1; 6.0.0 before 6.1.1
CVE-2020-36048
7.5
3%
Jan 8
Engine.IO before 4.0.0 allows attackers to cause a denial of service (resource consumption) via a POST request to the long polling transport
Affected: before 4.0.0
CVE-2023-31125
6.5
1%
May 8
Uncaught exception in engine.io
Affected: 5.1.0 before 6.4.2
CVE-2022-41940
6.5
2%
Nov 22
Uncaught exception in engine.io
Affected: before 3.6.1; 4.0.0 before 6.2.1
Showing 6