Engine.io (Socketio) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-07-08. Vendor: Socketio.

CVEs of Engine.io

• CVE-2026-59725 - CVSS 7.5 (high), 2026-07-08: Socket.IO enables bidirectional and low-latency communication for every platform. From 4.1.0 before 6.6.7, Engine.IO protocol v4 polling transport does not…
• CVE-2023-31125 - CVSS 6.5 (medium), 2023-05-08: Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. An uncaught exception…
• CVE-2022-41940 - CVSS 7.1 (high), 2022-11-22: Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. A specially crafted HTTP…
• CVE-2022-21676 - CVSS 7.5 (high), 2022-01-12: Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. A specially crafted HTTP…