CVE-2026-102599
1 advisory.
npm/engine.io CVE-2026-102599: high 7.5
Socket.IO: Engine.IO Protocol Revision Mismatch DoS
Action: Upgrade engine.io to 6.6.10 or later.
npm i engine.io@6.6.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 6.6.0 | 6.6.10 | - |
Fixed versions
| 6.6.10 |
Sources
- osv: GHSA-2gc4-cqfq-p2gv
- https://github.com/socketio/socket.io/security/advisories/GHSA-2gc4-cqfq-p2gv
- https://github.com/socketio/socket.io/commit/86db1fc3db2cd315a065d64c4e48918ccf9b4729
- https://github.com/socketio/socket.io
- https://github.com/socketio/socket.io/releases/tag/engine.io@6.6.10
CVE-2026-102599 · published · modified · JSON