Known vulnerabilities in socket.io

Vendor: socket.io
Software: socket.io
Software CPE: cpe:2.3:a:socket_io:socket.io:*:*:*:*:*:*:*:*
Total vulnerabilities: 5
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting socket.io socket.io is affected by 5 known vulnerabilities: 4 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135352 - Improper input validation
CVE-2026-59724
CWE-20 Medium
No
No
6.6.7 25.06.2026 SB20260625161
#VU135351 - Improper Resource Shutdown or Release
CVE-2026-59725
CWE-404 Medium
No
No
6.6.7 25.06.2026 SB20260625161
#VU94660 - Improper Check for Unusual or Exceptional Conditions
CVE-2024-38355
CWE-754 Medium
No
No
2.5.1, 4.6.2 23.07.2024 SB2024072312
SB2024072313
SB2024103166
and 2 more
#VU50833 - Permissions, Privileges, and Access Controls
CVE-2020-28481
CWE-264 Medium
No
No
2.4.0 22.02.2021 SB2021022214
SB2023110624
#VU14224 - Exposure of sensitive information to an unauthorized actor
CVE-2017-16031
CWE-200 Low
No
No
0.9.7 07.08.2018 SB2018080809