Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

socket.io-parser

Ecosystem:
npm
Package URL:
pkg:npm/socket.io-parser
Total PRs:
921 Dependabot PRs
Latest PR:
7 days ago
Unique Repositories:
720 repositories
Unique Repos (30 days):
25 repositories
Security Advisories
Insufficient validation when decoding a Socket.IO packet
GHSA-qm95-pgcg-qqfq CVE-2022-2421 CRITICAL published over 3 years ago • updated 2 days ago
Due to improper type validation in the `socket.io-parser` library (which is used by the `socket.io` and `socket.io-client` packages to encode and d...
Resource exhaustion in socket.io-parser
GHSA-xfhh-g9f5-x4m4 CVE-2020-36049 HIGH published almost 5 years ago • updated about 13 hours ago
The `socket.io-parser` npm package before versions 3.3.2 and 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large p...
socket.io allows an unbounded number of binary attachments
GHSA-677m-j7p3-52f9 CVE-2026-33151 HIGH published 3 months ago • updated 7 days ago
### Impact A specially crafted Socket.IO packet can make the server wait for a large number of binary attachments and buffer them, which can be ex...
Insufficient validation when decoding a Socket.IO packet
GHSA-cqmj-92xf-r6r9 CVE-2023-32695 MODERATE published about 3 years ago • updated 3 days ago
### Impact A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. ``` ...
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
Bump socket.io-parser from 3.3.2 to 3.3.3 in /src

shinjiezumi/tools #72

3.3.2 → 3.3.3 Patch PR
Closed over 3 years ago 1 comment
shinjiezumi
Bump socket.io-parser from 4.0.4 to 4.0.5

tatsuya/website #32

4.0.4 → 4.0.5 Patch PR
Closed over 3 years ago 2 comments
tatsuya
Bump socket.io-parser from 3.3.0 to 3.3.3

jprimke/htl-leo-csharp-4 #6

3.3.0 → 3.3.3 Patch PR
Closed over 3 years ago 1 comment
jprimke
Bump socket.io-parser from 3.3.2 to 3.3.3

cmunozgar/web #16

3.3.2 → 3.3.3 Patch PR
Closed over 3 years ago 1 comment
cmunozgar
Bump socket.io-parser from 3.3.0 to 3.3.3 in /din-frontend

dkr7tech/din #48

3.3.0 → 3.3.3 Patch PR
Closed over 3 years ago
dkr7tech
Bump socket.io-parser from 3.3.2 to 3.3.3

thehuijb/thehuijb.github.io #6

3.3.2 → 3.3.3 Patch PR
Closed over 3 years ago 1 comment
thehuijb
chore(deps): bump socket.io-parser from 4.0.4 to 4.0.5

tangollama/tangollama.github.io #32

4.0.4 → 4.0.5 Patch PR
Closed over 3 years ago 1 comment
tangollama
Bump socket.io-parser from 3.3.1 to 3.3.3

open-craft/xblock-group-project-v2 #195

3.3.1 → 3.3.3 Patch PR
Closed over 3 years ago 1 comment
open-craft
Bump socket.io-parser from 3.3.2 to 3.3.3

tkxkd0159/tkxkd0159.github.io #23

3.3.2 → 3.3.3 Patch PR
Closed over 3 years ago 1 comment
tkxkd0159
Bump socket.io-parser from 3.3.2 to 3.3.3

wbruntra/react-set #33

3.3.2 → 3.3.3 Patch PR
Closed over 3 years ago 1 comment
wbruntra
Bump socket.io-parser from 3.3.2 to 3.3.3

javan/details-element-polyfill #85

3.3.2 → 3.3.3 Patch PR
Closed over 3 years ago
javan
Bump socket.io-parser from 4.0.4 to 4.0.5 in /frontend

Teknologforeningen/barsborsen #66

4.0.4 → 4.0.5 Patch PR
Closed over 3 years ago 1 comment
Teknologforeningen
fix(deps): bump socket.io-parser from 3.3.2 to 3.3.3

nhj7/cocomon_fe #322

3.3.2 → 3.3.3 Patch PR
Closed over 3 years ago
nhj7
Bump socket.io-parser from 4.0.4 to 4.0.5 in /web

janerist/dsjtournaments #47

4.0.4 → 4.0.5 Patch PR
Closed over 3 years ago 1 comment
janerist
Bump socket.io-parser from 4.0.4 to 4.0.5 in /admin-web

janerist/dsjtournaments #46

4.0.4 → 4.0.5 Patch PR
Closed over 3 years ago
janerist
Bump socket.io-parser from 3.3.0 to 3.3.3 in /frontend

eulersson/dreamdrugs #80

3.3.0 → 3.3.3 Patch PR
Closed over 3 years ago 1 comment
eulersson
Bump socket.io-parser from 3.3.0 to 3.3.2 in /api

paul-schwendenman/minecraft-server-host #19

3.3.0 → 3.3.2 Patch PR
Closed almost 5 years ago 1 comment
paul-schwendenman
Bump socket.io-parser from 3.3.0 to 3.3.2

marcelobuzzetti/Controle #7

3.3.0 → 3.3.2 Patch PR
Closed almost 5 years ago 1 comment
marcelobuzzetti
Package Details
Name: socket.io-parser
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/socket.io-parser
JSON API: View JSON
Security Advisories

4

Active advisories
CRITICAL 1
HIGH 2
MODERATE 1
View All npm Advisories
Package Information
Description:

socket.io protocol parser

Repository: https://github.com/Automattic/socket.io-parser
Homepage: https://github.com/Automattic/socket.io-parser#readme
Latest Release: 4.2.4
about 3 years ago
Dependent Repos: 1,259,292
Dependent Packages: 303
Downloads: 44,217,820
Ranking: Top 0.0276% by dependent repos Top 0.0459% by downloads Top 0.1696% by dependent pkgs
PR Status
Open 416 (45.2%)
Merged 48 (5.2%)
Closed 429 (46.6%)
PR Types
Major 146 (15.9%)
Minor 76 (8.3%)
Patch 668 (72.5%)