[ Vendor · 1 CVEs ]
@socket.io
CVEs affecting @socket.io published in the last 30 days, plus any @socket.io CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-102600 | 29 Sep 2026 | CVSS 7.5 | Socket.IO: Prototype Pollution via Unsafe Client Session LookupSocket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-engine uses inherited object… | Fix |