socketio socket.io vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20265

Newest CVEs

• CVE-2026-102599

  Socket.IO: Engine.IO Protocol Revision Mismatch DoS

  socketio · socket.io

  High7.5
• CVE-2026-102600

  Socket.IO: Prototype Pollution via Unsafe Client Session Lookup

  socketio · socket.io

  High7.5
• CVE-2026-69185

  Socket.IO: Zero-attachment Memory Exhaustion

  socketio · socket.io

  High7.5
• CVE-2026-59724

  Socket.IO: Engine.IO WebTransport SID DoS

  socketio · socket.io

  High7.5
• CVE-2026-33151

  socket.io allows an unbounded number of binary attachments

  socketio · socket.io

  High8.7
• CVE-2024-38355

  Unhandled 'error' event in socket.io

  socketio · socket.io

  High7.3