Known vulnerabilities in socket.io
Vendor:
socket.io
Software:
socket.io
Software CPE:
cpe:2.3:a:socket_io:socket.io:*:*:*:*:*:*:*:*
Website:
https://socket.io/
Total vulnerabilities:
5
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
6.6.9
6.6.8
6.6.7
6.6.6
6.6.5
6.6.4
6.6.3
6.6.2
6.6.1
6.6.0
2.5.1
4.7.5
4.7.4
4.7.3
4.7.2
4.7.1
4.7.0
4.6.2
4.6.1
4.5.2
4.5.3
4.5.4
4.6.0
2.5.0
4.5.1
4.5.0
4.4.1
4.4.0
4.3.2
4.3.1
4.3.0
4.2.0
4.1.3
4.1.2
4.1.1
4.1.0
4.0.2
4.0.1
4.0.0
3.1.2
0.1
0.2
0.2.1
0.2.2
0.2.3
0.3
0.3.1
0.3.2
0.3.3
0.3.4
0.3.5
0.3.6
0.3.7
0.3.8
0.3.9
0.4
0.4.1
0.5
0.6
3.1.1
3.1.0
3.0.5
3.0.4
3.0.3
3.0.2
3.0.1
3.0.0
2.4.1
2.4.0
2.3.0
2.2.0
2.1.1
2.1.0
2.0.4
2.0.3
2.0.2
2.0.1
2.0.0
1.7.4
1.7.3
1.7.2
1.7.1
1.7.0
1.6.0
1.5.1
1.5.0
1.4.8
1.4.7
1.4.6
1.4.5
1.4.4
1.4.3
1.4.2
1.4.1
1.4.0
1.3.7
1.3.6
1.3.5
1.3.4
1.3.3
1.3.2
1.3.1
1.3.0
1.2.1
1.2.0
1.1.0
1.0.6
1.0.5
1.0.4
1.0.3
1.0.2
1.0.1
1.0.0
0.9.19
0.9.18
0.9.17
0.9.15
0.9.14
0.9.13
0.9.12
0.9.11
0.9.10
0.9.9
0.9.8
0.9.7
0.9.6
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1-1
0.9.1
0.9.0
0.8.7
0.8.6
0.8.5
0.8.4
0.8.3
0.8.2
0.8.1
0.8.0
0.7.11
0.7.10
0.7.9
0.7.8
0.7.7
0.7.6
0.7.5
0.7.4
0.7.3
0.7.2
0.7.1
0.7.0
0.6.17
0.6.16
0.6.15
0.6.14
0.6.13
0.6.12
0.6.11
0.6.10
0.6.9
0.6.8
0.6.7
0.6.6
0.6.5
0.6.4
0.6.3
0.6.2
0.6.1
0.6.0
0.5.3
0.5.2
0.5.1
0.5.0
Vulnerabilities (5)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU135352 - Improper input validation CVE-2026-59724 |
CWE-20 | Medium | 6.6.7 | 25.06.2026 |
SB20260625161 |
||
| #VU135351 - Improper Resource Shutdown or Release CVE-2026-59725 |
CWE-404 | Medium | 6.6.7 | 25.06.2026 |
SB20260625161 |
||
| #VU94660 - Improper Check for Unusual or Exceptional Conditions CVE-2024-38355 |
CWE-754 | Medium | 2.5.1, 4.6.2 | 23.07.2024 |
SB2024072312 SB2024072313 SB2024103166 and 2 more |
||
| #VU50833 - Permissions, Privileges, and Access Controls CVE-2020-28481 |
CWE-264 | Medium | 2.4.0 | 22.02.2021 |
SB2021022214 SB2023110624 |
||
| #VU14224 - Exposure of sensitive information to an unauthorized actor CVE-2017-16031 |
CWE-200 | Low | 0.9.7 | 07.08.2018 |
SB2018080809 |