Vendor
Socketio
11 known vulnerabilities in products by Socketio, 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2022-21676 | Uncaught Exception in engine.io | 7.5 | |
| High | CVE-2022-41940 | Uncaught exception in engine.io | 7.1 | |
| High | CVE-2026-102599 | Socket.IO: Engine.IO Protocol Revision Mismatch DoS | 7.5 | |
| High | CVE-2026-69185 | Socket.IO: Zero-attachment Memory Exhaustion | 7.5 | |
| High | CVE-2026-59725 | Socket.IO: Engine.IO Polling Transport Connection Exhaustion | 7.5 | |
| High | CVE-2026-59724 | Socket.IO: Engine.IO WebTransport SID DoS | 7.5 | |
| High | CVE-2026-102600 | Socket.IO: Prototype Pollution via Unsafe Client Session Lookup | 7.5 | |
| Medium | CVE-2023-31125 | Uncaught exception in engine.io | 6.5 | |
| High | CVE-2026-33151 | socket.io allows an unbounded number of binary attachments | 7.5 | |
| High | CVE-2023-32695 | Insufficient validation when decoding a Socket.IO packet | 7.3 | |
| High | CVE-2024-38355 | Unhandled 'error' event in socket.io | 7.3 |