CVE-2020-36048
1 advisory.
npm/engine.io CVE-2020-36048: high 7.5
Resource exhaustion in engine.io
Action: Upgrade engine.io to 3.6.0 or later.
npm i engine.io@3.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.6.0 | - |
Fixed versions
| 3.6.0 |
Sources
- osv: GHSA-j4f2-536g-r55m
- https://nvd.nist.gov/vuln/detail/CVE-2020-36048
- https://github.com/socketio/engine.io/commit/58e274c437e9cbcf69fd913c813aad8fbd253703
- https://github.com/socketio/engine.io/commit/734f9d1268840722c41219e69eb58318e0b2ac6b
- https://blog.caller.xyz/socketio-engineio-dos
- https://github.com/bcaller/kill-engine-io
- https://github.com/socketio/engine.io
CVE-2020-36048 · published · modified · JSON