Debian/node-socket.io-parser: high 7.5
Socket.IO enables bidirectional and low-latency communication for every platform. Prior to 4.2.7, 3.4.5, and 3.3.6, a specially crafted Socket.IO packet can make the server wait for a large number of
Action: Upgrade node-socket.io-parser to 4.2.4+~3.1.2-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.2.4+~3.1.2-1 | - |
Fixed versions
| 4.2.4+~3.1.2-1 |
Sources
- osv: DEBIAN-CVE-2026-69185#Debian:14/node-socket.io-parser
- https://security-tracker.debian.org/tracker/CVE-2026-69185
published · modified · JSON