Known vulnerabilities in socket.io-file

Vendor: Hamrahpay Dev Team
Software: socket.io-file
Software CPE: cpe:2.3:a:hamrahpay:socket.io-file:*:*:*:*:*:npm:*:*
Website: https://profiles.wordpress.org/hamrahpay/
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting socket.io-file socket.io-file is affected by 2 known vulnerabilities: 2 high Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47494 - Unrestricted Upload of File with Dangerous Type
CVE-2020-24807		 CWE-434 High
No
No
 - 06.10.2020 SB2020101011
#VU47493 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-15779		 CWE-22 High
No
No
 - 15.07.2020 SB2020071549