Sockjs@* Security Vulnerabilities and Issues — Sockjs@* CVE List

Lucene search

Sockjs ProjectSockjs*

2 matches found

CVE•added 2020/02/10 3:15 a.m.•101 views

CVE-2020-8823

htmlfile in lib/transport/htmlfile.js in SockJS before 0.3.0 is vulnerable to Reflected XSS via the /htmlfile c (aka callback) parameter.

6.1CVSS5.8AI score0.00644EPSS

CVE•added 2020/07/09 2:15 p.m.•49 views

CVE-2020-7693

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.

5.3CVSS5.6AI score0.11974EPSS