Known Vulnerabilities for Socket.io by Socketio
Listed below are 10 of the newest known vulnerabilities associated with "Socket.io" by "Socketio".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-39983 json | basic-ftp is an FTP client for Node.js. Prior to 5.2.1, basic-ftp allows FTP command injection via CRLF sequences (\r\n) in f... | Not Provided | 2026-04-09 | 2026-04-09 |
| CVE-2026-39420 json | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, an incomplete sandbox protection mechanism ... | Not Provided | 2026-04-14 | 2026-04-16 |
| CVE-2026-39418 json | MaxKB is an open-source AI assistant for enterprise. In versions 2.7.1 and below, sandbox network protection can be bypassed ... | Not Provided | 2026-04-14 | 2026-04-14 |
| CVE-2026-39320 json | Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.25.0 are vulnerable to an u... | Not Provided | 2026-04-21 | 2026-04-21 |
| CVE-2026-34977 json | Aperi'Solve is an open-source steganalysis web platform. Prior to 3.2.1, when uploading a JPEG, a user can specify an optiona... | Not Provided | 2026-04-06 | 2026-04-07 |
| CVE-2026-34477 json | The fix for CVE-2025-68161 https://logging.apache.org/security.html#CVE-2025-68161 was incomplete: it addressed hostname ve... | Not Provided | 2026-04-10 | 2026-04-10 |
| CVE-2026-34177 json | Canonical LXD versions 4.12 through 6.7 contain an incomplete denylist in isVMLowLevelOptionForbidden (lxd/project/limits/per... | Not Provided | 2026-04-09 | 2026-04-09 |
| CVE-2026-33151 json | Socket.IO is an open source, real-time, bidirectional, event-based, communication framework. Prior to versions 3.3.5, 3.4.4, ... | Not Provided | 2026-03-20 | 2026-03-23 |
| CVE-2026-32980 json | OpenClaw before 2026.3.13 reads and buffers Telegram webhook request bodies before validating the x-telegram-bot-api-secret-t... | Not Provided | 2026-03-29 | 2026-03-30 |
| CVE-2026-31507 json | In the Linux kernel, the following vulnerability has been resolved: net/smc: fix double-free of smc_spd_priv when tee() dupl... | Not Provided | 2026-04-22 | 2026-04-22 |