npm/socket.io-parser — 4 CVEs

CRITICAL9.8CVE-2022-2421Insufficient validation when decoding a Socket.IO packet

>= 4.0.0, < 4.0.5

HIGH7.5CVE-2026-33151socket.io allows an unbounded number of binary attachments

from 0, < 3.3.5

HIGH7.5CVE-2020-36049Resource exhaustion in socket.io-parser

from 0, < 3.3.2

HIGH7.3Insufficient validation when decoding a Socket.IO packet

>= 4.0.4, < 4.2.3

pkg:npm/socket.io-parser