socketio

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

socketio records in CISA KEV

No socketio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Engine.io 6 records MEDIUM Socket.io-parser 4 records MEDIUM Socket.io 2 records LOW Engine.io-client 1 record LOW Socket.io-client Java 1 record LOW

Records

1 record in Engine.io-client · all components

TI-2016-08578 CVE-2016-10536 · GHSA-4r4m-hjwj-43p8

Improper certificate validation in HackerOne engine.io-client node module

LOW 28

engine.io-client is the client for engine.io, the implementation of a transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.00997 Published 2018-05-31 Fixed in 1.6.9 CWE-300

Open these records in search →

Critical	1
High	15
Medium	3
Low	0
No CVSS	0