[ Vendor · 2 CVEs ]

socketio

CVEs affecting socketio published in the last 30 days, plus any socketio CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-102599 13 Oct 2026 CVSS 7.5 Socket.IO: Engine.IO Protocol Revision Mismatch DoSSocket.IO enables bidirectional and low-latency communication for every platform. From Engine.IO 6.6.0 until 6.6.10, a transport upgrade can… Fix
CVE-2026-102600 29 Sep 2026 CVSS 7.5 Socket.IO: Prototype Pollution via Unsafe Client Session LookupSocket.IO enables bidirectional and low-latency communication for every platform. Prior to 0.1.1, @socket.io/cluster-engine uses inherited object… Fix