CVE-2023-32695
1 advisory.
npm/socket.io-parser CVE-2023-32695: high 7.3
Insufficient validation when decoding a Socket.IO packet
Action: Upgrade socket.io-parser to 3.3.4 or later.
npm i socket.io-parser@4.2.3npm i socket.io-parser@3.4.3npm i socket.io-parser@3.3.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.4 | 4.2.3 | - |
| 3.4.0 | 3.4.3 | - |
| 0 | 3.3.4 | - |
Fixed versions
| 4.2.3 | 3.4.3 | 3.3.4 |
Sources
- osv: GHSA-cqmj-92xf-r6r9
- https://github.com/socketio/socket.io-parser/security/advisories/GHSA-cqmj-92xf-r6r9
- https://nvd.nist.gov/vuln/detail/CVE-2023-32695
- https://github.com/socketio/socket.io-parser/commit/1c220ddbf45ea4b44bc8dbf6f9ae245f672ba1b9
- https://github.com/socketio/socket.io-parser/commit/2dc3c92622dad113b8676be06f23b1ed46b02ced
- https://github.com/socketio/socket.io-parser/commit/3b78117bf6ba7e99d7a5cfc1ba54d0477554a7f3
- https://github.com/socketio/socket.io-parser/commit/ee006607495eca4ec7262ad080dd3a91439a5ba4
- https://github.com/socketio/socket.io-parser
- https://github.com/socketio/socket.io-parser/releases/tag/4.2.3
CVE-2023-32695 · published · modified · JSON