EUVD-2025-116368

Malicious code in auth-yaml-slides-socketio npm...

EUVD-2025-113654

Malicious code in fetch-socketio-cosmiconfig-tool npm...

MAL-2025-147877 Malicious code in sequelize-socketio-juno-andromeda (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8d6764d25deebfa43d5328d1f3bf9f5622e17aa5105592f702aefadab7aa8d2 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148054 Malicious code in socketio-geckodriver-child-process-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 992519d57d5eaddeba7d0d897fcfd3a9290cc2d2f620518393717a638329adce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142939 Malicious code in global-karma-socketio-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0241b4284d51930d8f79f4a26732e32fd0daa7662b27526d3f2e8df46389bb87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148049 Malicious code in socketio-draco-blitz-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180c7a73b5e53a5f51dde7e339af90597e7d2ba561bb2a7f5d61e4aa5b6accc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148061 Malicious code in socketio-proxima-ini-venus (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dd4c1cf784a1fcbcb51944404e2cc1777fc3110d3790e3495c63929c933166f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-140275 Malicious code in cache-luna-socketio-foundation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d3ee266d139f89aff6fffba83237a702f6d2665de63832d7becb99225fceef2a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-144565 Malicious code in loopback-socketio-restart-resolvers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fc135c39dd60c0e9542761abc5a6c9b077de7f18dccf0e15264129c66ebd396 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-115694

Malicious code in carina-loopback-zenith-socketio npm...

Fedora: Security Advisory (FEDORA-2025-3673a159a9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:3780-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : python-socketio (2025-3673a159a9)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3673a159a9 advisory. Release 5.14.2 - 2025-10-15 - Restore binary message support in message queue setups - Fix formatting of client connection error ---- Release 5.14.1 -...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-python-socketio (SUSE-SU-2025:3780-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:3780-1 advisory. - CVE-2025-61765: fixed by using json, rather than pickle for serialization bsc1251193 Tenable has...

Security update for python-python-socketio

This update for python-python-socketio fixes the following issues: CVE-2025-61765: fixed by using json, rather than pickle for serialization bsc1251193 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2025:3780-1 Security update for python-python-socketio

This update for python-python-socketio fixes the following issues: - CVE-2025-61765: fixed by using json, rather than pickle for serialization bsc1251193...

Remote Code Execution

python-socketio is vulnerable to Remote Code Execution. The vulnerability is due to insecure deserialization using pickle library, due to servers trusting and calling pickle.loads on inter-server message-queue payloads, This allowing an attacker with access to the message queue to send a crafted...

Fedora: Security Advisory (FEDORA-2025-96c38634c7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 42 Update: python-socketio-5.14.1-1.fc42

Socket.IO is a transport protocol that enables real-time bidirectional event-based communication between clients typically, though not always, web browsers and a server. The official implementations of the client and server components are written in JavaScript. This package provides Python...

Fedora 42 : python-socketio (2025-96c38634c7)

The remote Fedora 42 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-96c38634c7 advisory. Release 5.14.1 - 2025-10-02 - Restore support for rediss:// URLs, and add support for valkeys:// as well - Add support for Redis connections using unix socke...