44 matches found
CLSA-2026-1784856033 TuxCare security update for sockjs (1 CVE)
TuxCare rebuilt sockjs to address 1 CVE. Fixed in 0.3.18-tuxcare.1...
CLSA-2026-1776731780 TuxCare security update for sockjs (4 CVEs)
TuxCare rebuilt sockjs to address 4 CVEs. Fixed in 0.3.19-tuxcare.1...
Exploit for Improper Handling of Exceptional Conditions in Sockjs_Project Sockjs
CVE-2020-7693 Poc Note: I Confirm Payload for CVE-2020-76...
EUVD-2018-0494
Malware in sbrugna...
EUVD-2021-0832
Malware in sbrugna...
Improper Input Validation in SocksJS-Node
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...
GHSA-C9G6-9335-X697 Improper Input Validation in SocksJS-Node
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...
Cross-site scripting in SocksJS-node
htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c aka callback parameter...
Automattic: Reflected XSS due to vulnerable version of sockjs
Summary: There is reflected XSS on .simperium.com. The bug exists due to a vulnerable version of sockjs library. Platforms Affected: simperium.com js.simperium.com Steps To Reproduce: 1. Visit https://simperium.com/sock/1/0/0/0/htmlfile?c=alert'XSS'// 2. You will see an alert message because of...
CVE-2020-7693
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20. Mitigation There is no mitigation for this issue, the flaw can only be resolved by applying updates...
Denial Of Service (DoS)
sockjs is vulnerable to denial of service DoS. The vulnerability exists as the res.end gets called twice when improperly handling the Upgrade header with an incorrect URL...
SockJS Input Validation Error Vulnerability
SockJS is a browser JavaScript library . A security vulnerability exists in SockJS versions prior to 0.3.20, which stems from the program's failure to properly handle the Upgrade header. An attacker could exploit this vulnerability to cause the container hosting the sockjs application to crash...
CVE-2020-7693
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...
CVE-2020-7693
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...
Code injection
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...
CVE-2020-7693
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...
CVE-2020-7693
CVE-2020-7693 affects SockJS sockjs-node before 0.3.20. The issue is caused by improper handling of the Upgrade header with the value websocket, which can crash containers hosting SockJS apps. Severity per CVSS indicates a MEDIUM impact (availability impact = LOW). Remediation: upgrade SockJS to ...
CVE-2020-7693 Denial of Service (DoS)
Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20...
