Read the docs

socketio

Records19All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

socketio records in CISA KEV

No socketio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Engine.io 6 records MEDIUM Socket.io-parser 4 records MEDIUM Socket.io 2 records LOW Engine.io-client 1 record LOW Socket.io-client Java 1 record LOW

Records

1 record in Socket.io-client Java · all components

TI-2022-09431 CVE-2022-25867 · GHSA-85xx-xhjm-rhrw

NULL pointer dereference in io.socket:socket.io-client

Priority LOW 36

The package io.socket:socket.io-client before 2.0.1 are vulnerable to NULL Pointer Dereference when parsing a packet with with invalid payload format.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01652 Published 2022-08-02 Fixed in 2.0.1 CWE-476
Open these records in search →