Skip to content

Product

Socket engine.io-client vulnerabilities

1 published CVE affecting Socket engine.io-client, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest Socket engine.io-client CVEs

Newest publication first

  1. CVE-2016-10536 Insecure Defaults Allow MITM Over TLS in engine.io-client

    Published
    MediumCVSS 5.9

    engine.io-client is the client for engine.io, the implementation of a transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. The vulnerability is related to the way that node.js handles the rejectUnauthorized setting. If the value is somethin...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.