{"action":"Upgrade engine.io-client to 1.6.9 or later.","affected":[{"fixed":"1.6.9","introduced":"0"}],"component":"engine.io-client","cve_ids":["CVE-2016-10536"],"ecosystem":"npm","epss":0.00997,"exploited":false,"fixed_versions":["1.6.9"],"ghsa_id":"GHSA-4r4m-hjwj-43p8","id":"tcs_01M5KF19MYCCMX2DSSG481Z39T","modified_at":"2023-11-08T03:58:11.209416Z","published_at":"2019-02-18T23:39:50Z","references":["https://osv.dev/vulnerability/GHSA-4r4m-hjwj-43p8","https://nvd.nist.gov/vuln/detail/CVE-2016-10536","https://github.com/socketio/engine.io-client/commit/2c55b278a491bf45313ecc0825cf800e2f7ff5c1","https://github.com/advisories/GHSA-4r4m-hjwj-43p8","https://www.cigital.com/blog/node-js-socket-io","https://www.npmjs.com/advisories/99"],"severity":{"label":"medium","score":5.9},"sources":[{"source":"osv","source_id":"GHSA-4r4m-hjwj-43p8","url":"https://osv.dev/vulnerability/GHSA-4r4m-hjwj-43p8"}],"summary":"Insecure Defaults Allow MITM Over TLS in engine.io-client"}