Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: socketio Component: Engine.io Clear all filters
TI-2026-42593 CVE-2026-59724 · GHSA-gr94-w7qr-f4j3

Socket.IO: Engine.IO WebTransport SID DoS

Priority MEDIUM 40

Socket.IO enables bidirectional and low-latency communication for every platform.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00609 Published 2026-07-08 Partial fix · 6.6.7 CWE-20
TI-2023-14835 CVE-2023-31125 · GHSA-q9mw-68c2-j6m5

Uncaught exception in engine.io

Priority LOW 32

Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01327 Published 2023-05-08 Fixed in 6.4.2 CWE-248
TI-2022-20281 CVE-2022-41940 · GHSA-r7qp-cfhv-p84w

Uncaught exception in engine.io

Priority MEDIUM 64

Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0211 Published 2022-11-22 Partial fix · 3.6.1, 6.2.1 CWE-248
TI-2022-06052 CVE-2022-21676 · GHSA-273r-mgr4-v34f

Uncaught Exception in engine.io

Priority MEDIUM 44

Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02851 Published 2022-01-12 Fixed in 4.1.2, 5.2.1 +1 CWE-754