Socket / Engine.io
6 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2026-59725 | Socket.IO: Engine.IO Polling Transport Connection Exhaustion | HIGH | 7.5 | Jul 8, 2026 |
| CVE-2026-59724 | Socket.IO: Engine.IO WebTransport SID DoS | HIGH | 7.5 | Jul 8, 2026 |
| CVE-2023-31125 | Uncaught exception in engine.io | MEDIUM | 6.5 | May 8, 2023 |
| CVE-2022-41940 | Uncaught exception in engine.io | HIGH | 7.1 | Nov 22, 2022 |
| CVE-2022-21676 | Uncaught Exception in engine.io | HIGH | 7.5 | Jan 12, 2022 |
| CVE-2020-36048 | yarnpkg-socket.io/engine.io: allows attackers to cause a denial of service (resource consumption) via a POST request to the long polling transport | HIGH | 7.5 | Jan 7, 2021 |
Showing 1 to 6 of 6 CVEs