socketio

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

socketio records in CISA KEV

No socketio vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records in Engine.io · all components

TI-2022-20281 CVE-2022-41940 · GHSA-r7qp-cfhv-p84w

MEDIUM 64

Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0211 Published 2022-11-22 Partial fix · 3.6.1, 6.2.1 CWE-248

TI-2022-06052 CVE-2022-21676 · GHSA-273r-mgr4-v34f

MEDIUM 44

Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02851 Published 2022-01-12 Fixed in 4.1.2, 5.2.1 +1 CWE-754

TI-2026-42594 CVE-2026-59725 · GHSA-r635-g3xr-vw7x

MEDIUM 40

Socket.IO enables bidirectional and low-latency communication for every platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00636 Published 2026-07-08 Partial fix · 6.6.7 CWE-404

TI-2026-42593 CVE-2026-59724 · GHSA-gr94-w7qr-f4j3

MEDIUM 40

Socket.IO enables bidirectional and low-latency communication for every platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00609 Published 2026-07-08 Partial fix · 6.6.7 CWE-20

TI-2020-18427 CVE-2020-36048 · GHSA-j4f2-536g-r55m

LOW 39

Engine.IO before 4.0.0 allows attackers to cause a denial of service (resource consumption) via a POST request to the long polling transport.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03276 Published 2021-01-07 Partial fix · 3.6.0 CWE-400

TI-2023-14835 CVE-2023-31125 · GHSA-q9mw-68c2-j6m5

LOW 32

Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01327 Published 2023-05-08 Fixed in 6.4.2 CWE-248