Socket Engine.io
6 CVEs affecting Socket Engine.io. Latest disclosed: 2026-07-08. Critical: 0, High: 5.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-59725 | High | 7.5 | 2026-07-08 | Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not pro… |
CVE-2026-59724 | High | 7.5 | 2026-07-08 | Socket.IO enables bidirectional and low-latency communication for every platform. From 6.5.0 before 6.6.7, Engine.IO servers with WebTransport enabled can reso… |
CVE-2022-21676 | High | 7.5 | 2022-01-12 | Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. A specially crafted HTTP reques… |
CVE-2020-36048 | High | 7.5 | 2021-01-08 | Engine.IO before 4.0.0 allows attackers to cause a denial of service (resource consumption) via a POST request to the long polling transport. |
CVE-2022-41940 | High | 7.1 | 2022-11-22 | Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. A specially crafted HTTP reques… |
CVE-2023-31125 | Medium | 6.5 | 2023-05-08 | Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. An uncaught exception vulnerabi… |