Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade Vulnerable Library - Severity Critical #1582

Open
biljanaLukovic opened this issue Oct 31, 2022 · 0 comments
Open

Upgrade Vulnerable Library - Severity Critical #1582

biljanaLukovic opened this issue Oct 31, 2022 · 0 comments

Comments

@biljanaLukovic
Copy link

Insufficient validation when decoding a Socket.IO packet
Critical severity in socket.io-parser
CVE-2022-2421
Description: Due to improper type validation in the socket.io-parser library (which is used by the socket.io and socket.io-client packages to encode and decode Socket.IO packets), it is possible to overwrite the _placeholder object which allows an attacker to place references to functions at arbitrary places in the resulting query object.

Affected versions < 4.0.5 >= 4.1.0, < 4.2.1
Patched versions 4.0.5 and 4.2.1

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant