Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Insufficient validation when decoding a Socket.IO packet

🗓️ 26 Oct 2022 12:00:28Reported by GitHub Advisory DatabaseType 
github
 github🔗 github.com👁 48 Views

Insufficient validation in Socket.IO packet decodin

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: IBM Planning Analytics Workspace is affected by vulnerabilities in multiple Open Source Software (OSS) components
28 Mar 202415:34
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities present in IBM Answer Retrieval for Watson Discovery versions 2.9 and earlier
9 Jan 202318:12
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in Node.js, libcurl, Golang Go, Jetty, Guava, Netty, OpenSSL, Linux kernel may affect IBM Spectrum Protect Plus
23 Mar 202320:19
–ibm
IBM Security Bulletins		Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands may be vulnerable to arbitrary code execution due to CVE-2022-2421
4 Nov 202217:33
–ibm
ATTACKERKB		CVE-2022-2421
25 Oct 202222:00
–attackerkb
Circl		CVE-2022-2421
9 Jan 202508:14
–circl
CNNVD		Socket.IO SQL注入漏洞
26 Oct 202200:00
–cnnvd
CVE		CVE-2022-2421
25 Oct 202200:00
–cve
Cvelist		CVE-2022-2421 Socket.io - Improper type validation in attachment parsing
25 Oct 202200:00
–cvelist
EUVD		EUVD-2022-7153
3 Oct 202520:07
–euvd
Rows per page
Vulners
Node
socketsocket.io-parserRange3.4.0–3.4.2npm
OR
socketsocket.io-parserRange<3.3.3npm
OR
socketsocket.io-parserRange4.0.0–4.0.5npm
OR
socketsocket.io-parserRange4.1.0–4.2.1npm

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
22 Apr 2024 19:11Current
0.2Low risk
Vulners AI Score0.2
CVSS 3.19.8 - 10
EPSS0.0084
SSVC
CWE-20CWE-89CWE-1287
socket.iovalidationsecuritypackagefunctionobjectfix
48