WS-2016-0086

Engine.IO is vulnerable to DOS attacks via sending upgrade many events such that a client could create a lot of intervals without the old ones having a chance of being cleared...

security flaw

Integer overflow in sysepollwait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwrite kernel memory via a large number of events...