@socket.io
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| cluster-engine | 1 | – | Sep 29, 2026 |
| Socket.io-Parser | 1 | – | Oct 25, 2022 |
Exploited and recent CVEs
- CVE-2026-102600 Socket.IO: Prototype Pollution via Unsafe Client Session Lookup 0.4%
- CVE-2022-2421 Socket.io - Improper type validation in attachment parsing 1.4%