aibro (>=0.5.5, <=1.1.5), aj (2.2.11) +111 more potentially affected by CVE-2026-48809 via python-engineio (>=4.0.0, <=4.13.1)

python-engineio PYPI version =4.0.0, =0.5.5, =4.1.0, =0.16.0, =2.3.0, =1.0.5, =0.1.0, =0.3.27, =0.2.0, =4.2.10, =1.0.0, =0.2.18, =0.0.2, =0.0.10 and more Source cves: CVE-2026-48809 Source advisory: OSV:GHSA-M9GH-VJ53-GVH9...

aibro (>=0.5.5, <=1.1.5), aj (2.2.11) +111 more potentially affected by CVE-2026-48809 via python-engineio (>=4.0.0, <=4.13.1)

python-engineio PYPI version =4.0.0, =0.5.5, =4.1.0, =0.16.0, =2.3.0, =1.0.5, =0.1.0, =0.3.27, =0.2.0, =4.2.10, =1.0.0, =0.2.18, =0.0.2, =0.0.10 and more Source cves: CVE-2026-48809 Source advisory: SNYK:PYTHON-PYTHONENGINEIO-17660885...

ROOT-APP-NPM-CVE-2022-41940 CVE-2022-41940 in @rootio/engine.io - Patched by Root

Root has patched CVE-2022-41940 in the @rootio/engine.io package for Root:npm. Multiple fixed versions available...

EUVD-2019-0113

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2019-13611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking CSWSH vulnerability that allows attackers to make WebSocket...

CVE-2019-13611

An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking CSWSH vulnerability that allows attackers to make WebSocket connections to a server by using a victim's credentials, because the Origin header is not restricted...

Fedora 38 : python-engineio (2022-8ca9330e57)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2022-8ca9330e57 advisory. Automatic update for python-engineio-4.3.4-2.fc38. Changelog Thu Sep 15 2022 Benjamin A. Beasley 4.3.4-2 - Dont ship package-lock.json files with the example...

OPENSUSE-SU-2024:14157-1 python310-python-engineio-4.3.4-3.3 on GA media

These are all security issues fixed in the python310-python-engineio-4.3.4-3.3 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11260-1 python36-python-engineio-4.2.0-1.2 on GA media

These are all security issues fixed in the python36-python-engineio-4.2.0-1.2 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2019-13611

An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking CSWSH vulnerability that allows attackers to make WebSocket connections to a server by using a victim's credentials, because the Origin header is not restricted...

python-engineio vulnerable to Cross-Site Request Forgery (CSRF)

WebSocket cross-origin vulnerability Impact This is a Cross-Site Request Forgery CSRF vulnerability. It affects Socket.IO and Engine.IO web servers that authenticate clients using cookies. Patches python-engineio version 3.9.0 patches this vulnerability by adding server-side Origin header checks...

aioambient (>=0.1.1, <=0.1.3), imjoy (>=0.8.21, <=0.8.22) +1 more potentially affected by CVE-2019-13611 via python-engineio (>=3.2.2, <=3.8.2)

python-engineio PYPI version =3.2.2, =0.1.1, =0.8.21, =0.9.5, =0.10.16 Source cves: CVE-2019-13611 Source advisory: GHSA-J3JP-GVR5-7HWQ...

aioambient (>=0.1.1, <=0.1.3), eaxum-zou (>=0.0.1, <=0.0.15) +4 more potentially affected by CVE-2019-13611 via python-engineio (>=3.2.2, <=3.8.2.post1)

python-engineio PYPI version =3.2.2, =0.1.1, =0.0.1, =0.8.21, =0.9.5, =0.13.6 Source cves: CVE-2019-13611 Source advisory: OSV:GHSA-J3JP-GVR5-7HWQ...

CVE-2019-13611

An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking CSWSH vulnerability that allows attackers to make WebSocket connections to a server by using a victim's credentials, because the Origin header is not restricted...

CVE-2019-13611

An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking CSWSH vulnerability that allows attackers to make WebSocket connections to a server by using a victim's credentials, because the Origin header is not restricted...

DEBIAN-CVE-2019-13611

An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking CSWSH vulnerability that allows attackers to make WebSocket connections to a server by using a victim's credentials, because the Origin header is not restricted...

UBUNTU-CVE-2019-13611

An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking CSWSH vulnerability that allows attackers to make WebSocket connections to a server by using a victim's credentials, because the Origin header is not restricted...

CVE-2019-13611

An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking CSWSH vulnerability that allows attackers to make WebSocket connections to a server by using a victim's credentials, because the Origin header is not restricted...

PYSEC-2019-170

An issue was discovered in python-engineio through 3.8.2. There is a Cross-Site WebSocket Hijacking CSWSH vulnerability that allows attackers to make WebSocket connections to a server by using a victim's credentials, because the Origin header is not restricted...

aioambient (>=0.1.1, <=0.1.3), eaxum-zou (>=0.0.1, <=0.0.15) +4 more potentially affected by CVE-2019-13611 via python-engineio (>=3.2.2, <=3.8.2.post1)

python-engineio PYPI version =3.2.2, =0.1.1, =0.0.1, =0.8.21, =0.9.5, =0.13.6 Source cves: CVE-2019-13611 Source advisory: OSV:PYSEC-2019-170...