{"action":"Upgrade socket.io-parser to 3.3.2 or later.","affected":[{"fixed":"3.3.2","introduced":"0"},{"fixed":"3.4.1","introduced":"3.4.0"}],"component":"socket.io-parser","cve_ids":["CVE-2020-36049"],"ecosystem":"npm","epss":0.02671,"exploited":false,"fixed_versions":["3.3.2","3.4.1"],"ghsa_id":"GHSA-xfhh-g9f5-x4m4","id":"tcs_01M5KGHTKQCR3MPF4RYXM26FJ7","modified_at":"2023-11-08T04:03:40.136588Z","published_at":"2021-06-30T16:51:31Z","references":["https://osv.dev/vulnerability/GHSA-xfhh-g9f5-x4m4","https://nvd.nist.gov/vuln/detail/CVE-2020-36049","https://github.com/socketio/socket.io-parser/commit/dcb942d24db97162ad16a67c2a0cf30875342d55","https://blog.caller.xyz/socketio-engineio-dos","https://github.com/bcaller/kill-engine-io","https://github.com/socketio/socket.io-parser/releases/tag/3.3.2","https://github.com/socketio/socket.io-parser/releases/tag/3.4.1","https://www.npmjs.com/package/socket.io-parser"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-xfhh-g9f5-x4m4","url":"https://osv.dev/vulnerability/GHSA-xfhh-g9f5-x4m4"}],"summary":"Resource exhaustion in socket.io-parser"}