socketio vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20232
3. 20241
4. 20266

Newest CVEs

• CVE-2026-102599

  Socket.IO: Engine.IO Protocol Revision Mismatch DoS

  socketio · socket.io

  High7.5
• CVE-2026-102600

  Socket.IO: Prototype Pollution via Unsafe Client Session Lookup

  socketio · socket.io

  High7.5
• CVE-2026-69185

  Socket.IO: Zero-attachment Memory Exhaustion

  socketio · socket.io

  High7.5
• CVE-2026-59725

  Socket.IO: Engine.IO Polling Transport Connection Exhaustion

  socketio · engine.io

  High7.5
• CVE-2026-59724

  Socket.IO: Engine.IO WebTransport SID DoS

  socketio · socket.io

  High7.5
• CVE-2026-33151

  socket.io allows an unbounded number of binary attachments

  socketio · socket.io

  High8.7
• CVE-2024-38355

  Unhandled 'error' event in socket.io

  socketio · socket.io

  High7.3
• CVE-2023-32695

  Insufficient validation when decoding a Socket.IO packet

  socketio · socket.io-parser

  High7.3
• CVE-2023-31125

  Uncaught exception in engine.io

  socketio · engine.io

  Medium6.5
• CVE-2022-41940

  Uncaught exception in engine.io

  socketio · engine.io

  High7.1