{"action":"Upgrade socket.io-parser to 3.3.4 or later.","affected":[{"fixed":"4.2.3","introduced":"4.0.4"},{"fixed":"3.4.3","introduced":"3.4.0"},{"fixed":"3.3.4","introduced":"0"}],"component":"socket.io-parser","cve_ids":["CVE-2023-32695"],"ecosystem":"npm","epss":0.01059,"exploited":false,"fixed_versions":["4.2.3","3.4.3","3.3.4"],"ghsa_id":"GHSA-cqmj-92xf-r6r9","id":"tcs_01M5KFKC39WEYJXM7HCKB1TEME","modified_at":"2024-11-18T16:26:29Z","published_at":"2023-05-23T19:55:13Z","references":["https://osv.dev/vulnerability/GHSA-cqmj-92xf-r6r9","https://github.com/socketio/socket.io-parser/security/advisories/GHSA-cqmj-92xf-r6r9","https://nvd.nist.gov/vuln/detail/CVE-2023-32695","https://github.com/socketio/socket.io-parser/commit/1c220ddbf45ea4b44bc8dbf6f9ae245f672ba1b9","https://github.com/socketio/socket.io-parser/commit/2dc3c92622dad113b8676be06f23b1ed46b02ced","https://github.com/socketio/socket.io-parser/commit/3b78117bf6ba7e99d7a5cfc1ba54d0477554a7f3","https://github.com/socketio/socket.io-parser/commit/ee006607495eca4ec7262ad080dd3a91439a5ba4","https://github.com/socketio/socket.io-parser","https://github.com/socketio/socket.io-parser/releases/tag/4.2.3"],"severity":{"label":"high","score":7.3},"sources":[{"source":"osv","source_id":"GHSA-cqmj-92xf-r6r9","url":"https://osv.dev/vulnerability/GHSA-cqmj-92xf-r6r9"}],"summary":"Insufficient validation when decoding a Socket.IO packet"}