socket.io-parser vulnerabilities

CVEs whose affected-version data names the socket.io-parser package (npm). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-69185High· 7.5

1mo ago

Socket.IO enables bidirectional and low-latency communication for every platform

Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 4.2.7, 3.4.5, and 3.3.6, a specially crafted Socket.IO packet can make the server wait for a large number of binary attachments and buffer them, w…

▾ Twilightsocket.io-parser · socket.io-parserEPSS 0.50%via NVD