Vulnerabilities > Socket > Socket IO Parser > 4.1.2

DATE CVE VULNERABILITY TITLE RISK
2023-05-27 CVE-2023-32695 Improper Check for Unusual or Exceptional Conditions vulnerability in Socket Socket.Io-Parser
socket.io parser is a socket.io encoder and decoder written in JavaScript complying with version 5 of socket.io-protocol.
network
low complexity
socket CWE-754
7.5
2022-10-26 CVE-2022-2421 Unspecified vulnerability in Socket Socket.Io-Parser
Due to improper type validation in attachment parsing the Socket.io js library, it is possible to overwrite the _placeholder object which allows an attacker to place references to functions at arbitrary places in the resulting query object.
network
low complexity
socket
critical
9.8