CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

CVE-2026-48804 python-socketio: Binary attachment accumulation can cause denial of service

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

SUSE SLED15 / SLES15 Security Update : python-python-socketio (SUSE-SU-2026:3086-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:3086-1 advisory. - CVE-2026-48804: Binary attachment accumulation can cause denial of service bsc1269491. Tenable has extracted the...

SUSE-SU-2026:3086-1 Security update for python-python-socketio

This update for python-python-socketio fixes the following issues: - CVE-2026-48804: Binary attachment accumulation can cause denial of service bsc1269491...

horus-remote-api (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-48804 via python-socketio (4.0.0)

python-socketio PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-socketio and may be impacted: - horus-remote-api =0.1.0, =0.1.1 Source cves: CVE-2026-48804 Source advisory: OSV:PYSEC-2026-3042...

aioambient (>=0.1.1, <=0.1.3), assemblyline-ui (>=4.0.0.dev1, <=4.0.0.dev20) +9 more potentially affected by CVE-2026-48804 via python-socketio (3.1.2)

python-socketio PYPI version 3.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-socketio and may be impacted: - aioambient =0.1.1, =4.0.0.dev1, =2.0.2, =2.0.2, =0.2.0, =0.1.0, =0.1.0, =0.4.0, =0.13.0, =0.1.4, =0.6.0 Source cves: CVE-2026-4880...

aioambient (1.2.0), baseweb (0.0.5) +31 more potentially affected by CVE-2026-48804 via python-socketio (4.6.0)

python-socketio PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-socketio and may be impacted: - aioambient 1.2.0 - baseweb 0.0.5 - bitflyer-rt =2.20.0, =0.0.16, =1.5.0, =0.1.8.1, =1.0.0, =0.2.4, =0.2.0, =20.10.0, =20.10.0,...

coderz (>=0.1.2, <=0.1.16) potentially affected by CVE-2026-48804 via python-socketio (4.0.2)

python-socketio PYPI version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on python-socketio and may be impacted: - coderz =0.1.2, =0.1.16 Source cves: CVE-2026-48804 Source advisory: OSV:PYSEC-2026-3042...

zou (>=0.9.5, <=0.10.16) potentially affected by CVE-2026-48804 via python-socketio (4.0.3)

python-socketio PYPI version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on python-socketio and may be impacted: - zou =0.9.5, =0.10.16 Source cves: CVE-2026-48804 Source advisory: OSV:PYSEC-2026-3042...

acho-sdk (>=0.2.10, <=0.3.13), aibro (>=0.5.5, <=1.1.5) +224 more potentially affected by CVE-2026-48804 via python-socketio (>=5.0.0, <=5.16.1)

python-socketio PYPI version =5.0.0, =0.2.10, =0.5.5, =2.1.0rc1, =2.2.11, =2.2.11, =0.1.2, =1.0.0, =0.0.2, =0.0.2rc2, =4.1.0, =0.1.1, =4.1.0, =0.16.0, =2.3.0, =3.4.4 and more Source cves: CVE-2026-48804 Source advisory: OSV:PYSEC-2026-3042...

zou (0.10.17) potentially affected by CVE-2026-48804 via python-socketio (4.2.1)

python-socketio PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-socketio and may be impacted: - zou 0.10.17 Source cves: CVE-2026-48804 Source advisory: OSV:PYSEC-2026-3042...

ROOT-APP-PYPI-CVE-2026-48804 CVE-2026-48804 in rootio-python-socketio - Patched by Root

Root has patched CVE-2026-48804 in the rootio-python-socketio package for Root:PyPI. Multiple fixed versions available...

SUSE CVE-2026-48804

python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then processed. Prior to...

aioambient (>=1.0.2, <=1.0.4), appdaemon (>=4.0.4, <=4.0.5) +9 more potentially affected by CVE-2026-48804 via python-socketio (4.4.0)

python-socketio PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-socketio and may be impacted: - aioambient =1.0.2, =4.0.4, =0.1.3, =1.0.1, =0.9.0, =1.8.0, =0.4.0, =2.2.1, =2.2.3, =0.0.4, =0.8.1 Source cves: CVE-2026-48804 Sour...

zou (0.10.17) potentially affected by CVE-2026-48804 via python-socketio (4.2.1)

python-socketio PYPI version 4.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on python-socketio and may be impacted: - zou 0.10.17 Source cves: CVE-2026-48804 Source advisory: OSV:GHSA-5W7Q-77MV-V69F...

zou (>=0.9.5, <=0.10.16) potentially affected by CVE-2026-48804 via python-socketio (4.0.3)

python-socketio PYPI version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on python-socketio and may be impacted: - zou =0.9.5, =0.10.16 Source cves: CVE-2026-48804 Source advisory: OSV:GHSA-5W7Q-77MV-V69F...

aioambient (1.2.0), baseweb (0.0.5) +31 more potentially affected by CVE-2026-48804 via python-socketio (4.6.0)

python-socketio PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-socketio and may be impacted: - aioambient 1.2.0 - baseweb 0.0.5 - bitflyer-rt =2.20.0, =0.0.16, =1.5.0, =0.1.8.1, =1.0.0, =0.2.4, =0.2.0, =20.10.0, =20.10.0,...

horus-remote-api (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-48804 via python-socketio (4.0.0)

python-socketio PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-socketio and may be impacted: - horus-remote-api =0.1.0, =0.1.1 Source cves: CVE-2026-48804 Source advisory: OSV:GHSA-5W7Q-77MV-V69F...