SO
Vendor
socketio
10
CVEs
0
On KEV
1
New 30D
Products
SO7.5
socket.io
socketio
6 CVEs0 on KEV1 new
EN7.5
engine.io
socketio
3 CVEs0 on KEV0 new
SO7.5
socket.io-parser
socketio
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102599 | SO socket.io socketio | 7.5 | Oct 13 | Socket.IO: Engine.IO Protocol Revision Mismatch DoS |
| CVE-2026-102600 | SO socket.io socketio | 7.5 | Sep 29 | Socket.IO: Prototype Pollution via Unsafe Client Session Lookup |
| CVE-2026-69185 | SO socket.io socketio | 7.5 | Aug 3 | Socket.IO: Zero-attachment Memory Exhaustion |
| CVE-2026-59725 | EN engine.io socketio | 7.5 | Jul 8 | Socket.IO: Engine.IO Polling Transport Connection Exhaustion |
| CVE-2026-59724 | SO socket.io socketio | 7.5 | Jul 8 | Socket.IO: Engine.IO WebTransport SID DoS |
| CVE-2026-33151 | SO socket.io socketio | 7.5 | Mar 20 | socket.io allows an unbounded number of binary attachments |
| CVE-2024-38355 | SO socket.io socketio | 7.3 | Jun 19 | Unhandled 'error' event in socket.io |
| CVE-2023-32695 | SO socket.io-parser socketio | 7.5 | May 27 | Insufficient validation when decoding a Socket.IO packet |
| CVE-2023-31125 | EN engine.io socketio | 6.5 | May 8 | Uncaught exception in engine.io |
| CVE-2022-41940 | EN engine.io socketio | 6.5 | Nov 22 | Uncaught exception in engine.io |