{"action":"Upgrade socket.io-parser to 3.3.6 or later.","affected":[{"fixed":"4.2.7","introduced":"4.0.0"},{"fixed":"3.4.5","introduced":"3.4.0"},{"fixed":"3.3.6","introduced":"0"}],"component":"socket.io-parser","cve_ids":["CVE-2026-69185"],"ecosystem":"npm","epss":0.0063,"exploited":false,"fixed_versions":["4.2.7","3.4.5","3.3.6"],"ghsa_id":"GHSA-2m8v-j782-fhvr","id":"tcs_01M5KETHP2XZSDXFA7N1BMCF31","modified_at":"2026-09-10T03:50:53.268104584Z","published_at":"2026-08-03T19:09:44Z","references":["https://osv.dev/vulnerability/GHSA-2m8v-j782-fhvr","https://github.com/socketio/socket.io/security/advisories/GHSA-2m8v-j782-fhvr","https://github.com/socketio/socket.io/commit/7c6ef571a00656718e9e05e3b948fd1758b2a7b4","https://github.com/socketio/socket.io/commit/9c6323e5cde41bd75df3379b5fc9293664a5f240","https://github.com/socketio/socket.io/commit/ced94ffa3ac020a8f3c14eb98a3bf34acb14d291","https://github.com/socketio/socket.io"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-2m8v-j782-fhvr","url":"https://osv.dev/vulnerability/GHSA-2m8v-j782-fhvr"}],"summary":"Socket.IO: Zero-attachment Memory Exhaustion"}