Known vulnerabilities in SockJS for Node
Vendor:
SockJS
Software:
SockJS for Node
Software CPE:
cpe:2.3:a:sockjs:sockjs_for_node:*:*:*:*:*:*:*:*
Website:
https://github.com/sockjs
Total vulnerabilities:
2
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (2)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU29692 - Resource exhaustion CVE-2020-7693 |
CWE-400 | Medium | 0.3.20 | 13.07.2020 |
SB2020071306 |
||
| #VU25397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-8823 |
CWE-79 | Low | 0.3.0 | 17.02.2020 |
SB2020021709 |