pypi python-socketio vulnerabilities

Latest pypi python-socketio CVEs

Newest publication first

1. CVE-2026-48804 python-socketio: Binary attachment accumulation can cause denial of service

   Published 2026-08-11

   High·CVSS 7.5 EPSS 0.49%

   python-socketio is a Python implementation of the Socket.IO realtime client and server. The python-socketio server stores binary EVENT and ACK messages in memory while it waits to receive their binary attachments. Once all the attachments are received, these messages are then pro...

2. CVE-2025-61765 python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments

   Published 2025-10-06

   Medium·CVSS 6.4

   Summary A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which the attacker previously gained access to the message queue tha...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.