Known vulnerabilities in socket.io 6.6.0

Vendor: socket.io
Software: socket.io
Version: 6.6.0
Software CPE: cpe:2.3:a:socket_io:socket.io:*:*:*:*:*:*:*:*
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting socket.io version 6.6.0 socket.io 6.6.0 is affected by 2 vulnerabilities: 2 medium Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU135352 - Improper input validation
CVE-2026-59724
CWE-20 Medium
No
No
6.6.7 25.06.2026 SB20260625161
#VU135351 - Improper Resource Shutdown or Release
CVE-2026-59725
CWE-404 Medium
No
No
6.6.7 25.06.2026 SB20260625161