EUVD-2025-113323

Malicious code in galaxy-gulp-socketio-solis npm...

EUVD-2025-111119

Malicious code in mini-css-extract-plugin-socketio-bellatrix-lint-staged npm...

EUVD-2025-116368

Malicious code in auth-yaml-slides-socketio npm...

EUVD-2025-123071

Malicious code in puppeteer-epimetheus-socketio-reveal-md npm...

EUVD-2025-113654

Malicious code in fetch-socketio-cosmiconfig-tool npm...

EUVD-2025-112044

Malicious code in jwt-atlas-betelgeuse-socketio npm...

EUVD-2025-115831

Malicious code in cache-luna-socketio-foundation npm...

EUVD-2025-115141

Malicious code in commitlint-config-angular-kronos-nebula-socketio npm...

EUVD-2025-115153

Malicious code in commitlint-chai-wasat-socketio npm...

EUVD-2025-123914

Malicious code in pavo-process-socketio-husky npm...

MAL-2025-148049 Malicious code in socketio-draco-blitz-pavo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c180c7a73b5e53a5f51dde7e339af90597e7d2ba561bb2a7f5d61e4aa5b6accc This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-142939 Malicious code in global-karma-socketio-algol (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0241b4284d51930d8f79f4a26732e32fd0daa7662b27526d3f2e8df46389bb87 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-148054 Malicious code in socketio-geckodriver-child-process-exec (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 992519d57d5eaddeba7d0d897fcfd3a9290cc2d2f620518393717a638329adce This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Fedora: Security Advisory (FEDORA-2025-3673a159a9)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Advisory (SUSE-SU-2025:3780-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 43 : python-socketio (2025-3673a159a9)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-3673a159a9 advisory. Release 5.14.2 - 2025-10-15 - Restore binary message support in message queue setups - Fix formatting of client connection error ---- Release 5.14.1 -...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : python-python-socketio (SUSE-SU-2025:3780-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2025:3780-1 advisory. - CVE-2025-61765: fixed by using json, rather than pickle for serialization bsc1251193 Tenable has...

Security update for python-python-socketio

This update for python-python-socketio fixes the following issues: CVE-2025-61765: fixed by using json, rather than pickle for serialization bsc1251193 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...

SUSE-SU-2025:3780-1 Security update for python-python-socketio

This update for python-python-socketio fixes the following issues: - CVE-2025-61765: fixed by using json, rather than pickle for serialization bsc1251193...

Remote Code Execution

python-socketio is vulnerable to Remote Code Execution. The vulnerability is due to insecure deserialization using pickle library, due to servers trusting and calling pickle.loads on inter-server message-queue payloads, This allowing an attacker with access to the message queue to send a crafted...