What’s Vulnerable › Products

socketio socket.io vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your socketio socket.io version is affected

Latest socketio socket.io vulnerabilities

• CVE-2026-102599 — Socket.IO: Engine.IO Protocol Revision Mismatch DoS (CVSS 7.5)
• CVE-2026-102600 — Socket.IO: Prototype Pollution via Unsafe Client Session Lookup (CVSS 7.5)
• CVE-2026-69185 — Socket.IO: Zero-attachment Memory Exhaustion (CVSS 7.5)
• CVE-2024-38355 — Unhandled 'error' event in socket.io (CVSS 7.3)
• CVE-2020-28481 — Insecure Defaults (CVSS 4.3)
• CVE-2017-16031 — (CVSS 7.5)