Skip to main content
cve.nowby Sazabi
← npm
npmPackage

socket.io-file

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
npm

Advisories 2

  • The socket.io-file package through 2.0.31 for Node.js relies on client-side validation of file types, which allows remote attackers to…

    Affected: through 2.0.31.

  • A Path Traversal issue was discovered in the socket.io-file package through 2.0.31 for Node.js.

    Affected: through 2.0.31.