HIGH7.5npm
GHSA-2m8v-j782-fhvr· CVE-2026-69185Socket.IO: Zero-attachment Memory Exhaustion
Modified: 9/10/2026
package
pkg:npm/socket.io-parser
Socket.IO: Zero-attachment Memory Exhaustion
Modified: 9/10/2026
socket.io allows an unbounded number of binary attachments
Modified: 9/10/2026
Insufficient validation when decoding a Socket.IO packet
Modified: 11/18/2024
Insufficient validation when decoding a Socket.IO packet
Modified: 11/8/2023
Resource exhaustion in socket.io-parser
Modified: 11/8/2023