What’s Vulnerable › Products

@socket.io cluster-engine vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your @socket.io cluster-engine version is affected

Latest @socket.io cluster-engine vulnerabilities

• CVE-2026-102600 — Socket.IO: Prototype Pollution via Unsafe Client Session Lookup (CVSS 7.5)