socketio

Products

Exploited and recent CVEs

• CVE-2026-102599 High 7.5 Socket.IO: Engine.IO Protocol Revision Mismatch DoS 0.6%
• CVE-2026-102600 High 7.5 Socket.IO: Prototype Pollution via Unsafe Client Session Lookup 0.4%
• CVE-2026-69185 High 7.5 Socket.IO: Zero-attachment Memory Exhaustion 0.6%
• CVE-2026-59725 High 7.5 Socket.IO: Engine.IO Polling Transport Connection Exhaustion 0.6%
• CVE-2026-59724 High 7.5 Socket.IO: Engine.IO WebTransport SID DoS 0.6%
• CVE-2026-33151 High 8.7 socket.io allows an unbounded number of binary attachments 0.5%
• CVE-2024-38355 High 7.3 Unhandled 'error' event in socket.io 0.8%
• CVE-2023-32695 High 7.3 Insufficient validation when decoding a Socket.IO packet 1.1%
• CVE-2023-31125 Medium 6.5 Uncaught exception in engine.io 1.3%
• CVE-2022-41940 High 7.1 Uncaught exception in engine.io 2.1%
• CVE-2022-21676 High 7.5 Uncaught Exception in engine.io 2.9%