| Package | Affected versions | Patched versions |
|---|---|---|
| socket.io-parser | < 3.4.1 | 3.4.1 |
| socket.io-parser | ≥ 3.4.0, < 3.4.1< 3.3.2 | 3.4.13.3.2 |
The socket.io-parser npm package before versions 3.3.2 and 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large packet because a concatenation approach is used.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free