{"items":[{"id":"CVE-2026-102599","published":"2026-10-13T19:05:10.870Z","updated":"2026-10-17T00:39:46.378Z","title":"Socket.IO: Engine.IO Protocol Revision Mismatch DoS","severity":"HIGH","score":7.5,"vendor":"socketio","product":"socket.io","kev":false,"epss":0.00576,"kevAdded":null},{"id":"CVE-2026-102600","published":"2026-09-29T15:23:15.857Z","updated":"2026-09-29T16:28:28.476Z","title":"Socket.IO: Prototype Pollution via Unsafe Client Session Lookup","severity":"HIGH","score":7.5,"vendor":"socketio","product":"socket.io","kev":false,"epss":0.00382,"kevAdded":null},{"id":"CVE-2026-69185","published":"2026-08-03T19:09:10.073Z","updated":"2026-08-03T20:31:54.428Z","title":"Socket.IO: Zero-attachment Memory Exhaustion","severity":"HIGH","score":7.5,"vendor":"socketio","product":"socket.io","kev":false,"epss":0.0063,"kevAdded":null},{"id":"CVE-2026-59725","published":"2026-07-08T15:37:52.293Z","updated":"2026-10-14T18:46:37.137Z","title":"Socket.IO: Engine.IO Polling Transport Connection Exhaustion","severity":"HIGH","score":7.5,"vendor":"socketio","product":"engine.io","kev":false,"epss":0.00636,"kevAdded":null},{"id":"CVE-2026-59724","published":"2026-07-08T15:35:39.813Z","updated":"2026-07-08T19:41:18.905Z","title":"Socket.IO: Engine.IO WebTransport SID DoS","severity":"HIGH","score":7.5,"vendor":"socketio","product":"socket.io","kev":false,"epss":0.00609,"kevAdded":null},{"id":"CVE-2026-33151","published":"2026-03-20T20:13:31.424Z","updated":"2026-03-23T16:50:16.998Z","title":"socket.io allows an unbounded number of binary attachments","severity":"HIGH","score":8.7,"vendor":"socketio","product":"socket.io","kev":false,"epss":0.00535,"kevAdded":null},{"id":"CVE-2024-38355","published":"2024-06-19T19:48:50.193Z","updated":"2024-09-03T20:35:40.515Z","title":"Unhandled 'error' event in socket.io","severity":"HIGH","score":7.3,"vendor":"socketio","product":"socket.io","kev":false,"epss":0.00807,"kevAdded":null},{"id":"CVE-2023-32695","published":"2023-05-27T15:44:03.235Z","updated":"2025-01-13T21:03:34.130Z","title":"Insufficient validation when decoding a Socket.IO packet","severity":"HIGH","score":7.3,"vendor":"socketio","product":"socket.io-parser","kev":false,"epss":0.01059,"kevAdded":null},{"id":"CVE-2023-31125","published":"2023-05-08T20:21:01.341Z","updated":"2025-02-13T16:49:44.361Z","title":"Uncaught exception in engine.io","severity":"MEDIUM","score":6.5,"vendor":"socketio","product":"engine.io","kev":false,"epss":0.01327,"kevAdded":null},{"id":"CVE-2022-41940","published":"2022-11-22T00:00:00.000Z","updated":"2025-04-22T16:02:20.459Z","title":"Uncaught exception in engine.io","severity":"HIGH","score":7.1,"vendor":"socketio","product":"engine.io","kev":false,"epss":0.0211,"kevAdded":null},{"id":"CVE-2022-21676","published":"2022-01-12T18:25:15.000Z","updated":"2025-04-23T19:13:15.800Z","title":"Uncaught Exception in engine.io","severity":"HIGH","score":7.5,"vendor":"socketio","product":"engine.io","kev":false,"epss":0.02851,"kevAdded":null}]}