CVE-2020-36049

2021-01-0800:15:11

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.5%

JSON

socket.io-parser before 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large packet because a concatenation approach is used.

CPENameOperatorVersion
socket.io-parsereq2.1.4
socket.io-parsereq3.1.0
socket.io-parsereq2.2.5
socket.io-parsereq2.1.0
socket.io-parsereq2.2.0
socket.io-parsereq2.2.4
socket.io-parsereq2.1.3
socket.io-parsereq3.1.3
socket.io-parsereq2.2.3
socket.io-parsereq2.2.6

Name	Operator	Version
socket.io-parser	eq	2.1.4
socket.io-parser	eq	3.1.0
socket.io-parser	eq	2.2.5
socket.io-parser	eq	2.1.0
socket.io-parser	eq	2.2.0
socket.io-parser	eq	2.2.4
socket.io-parser	eq	2.1.3
socket.io-parser	eq	3.1.3
socket.io-parser	eq	2.2.3
socket.io-parser	eq	2.2.6