Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

socket.io-parser

Ecosystem:
npm
Package URL:
pkg:npm/socket.io-parser
Total PRs:
365 Dependabot PRs
Latest PR:
about 14 hours ago
Unique Repositories:
315 repositories
Unique Repos (30 days):
7 repositories
Security Advisories
Resource exhaustion in socket.io-parser
GHSA-xfhh-g9f5-x4m4 CVE-2020-36049 HIGH published over 4 years ago • updated 8 days ago
The `socket.io-parser` npm package before versions 3.3.2 and 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large p...
Insufficient validation when decoding a Socket.IO packet
GHSA-qm95-pgcg-qqfq CVE-2022-2421 CRITICAL published about 3 years ago • updated 8 days ago
Due to improper type validation in the `socket.io-parser` library (which is used by the `socket.io` and `socket.io-client` packages to encode and d...
Insufficient validation when decoding a Socket.IO packet
GHSA-cqmj-92xf-r6r9 CVE-2023-32695 MODERATE published over 2 years ago • updated 8 days ago
### Impact A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. ``` ...
Recent PRs (filtered by: Patch PRs )
RSS Feed Clear filter
bump socket.io-parser from 3.3.0 to 3.3.3 in /test/__fixtures__/ts-nm-individually

sergioramos/serverless-plugin-tree-shake #460

3.3.0 → 3.3.3 Patch PR
Closed about 3 years ago
sergioramos
chore(deps): bump socket.io-parser from 3.3.0 to 3.3.3 in /test/__fixtures__/ts-pnp-single

sergioramos/serverless-plugin-tree-shake #459

3.3.0 → 3.3.3 Patch PR
Closed about 3 years ago
sergioramos
bump socket.io-parser from 3.3.0 to 3.3.3 in /test/__fixtures__/ts-nm-single

sergioramos/serverless-plugin-tree-shake #458

3.3.0 → 3.3.3 Patch PR
Closed about 3 years ago
sergioramos
chore(deps): bump socket.io-parser from 3.3.0 to 3.3.3 in /test/__fixtures__/js-pnp-individually

sergioramos/serverless-plugin-tree-shake #457

3.3.0 → 3.3.3 Patch PR
Closed about 3 years ago
sergioramos
Bump socket.io-parser from 3.3.0 to 3.3.3 in /iam-dashboard

indigo-iam/iam-ng #38

3.3.0 → 3.3.3 Patch PR
Closed about 3 years ago 2 comments
indigo-iam
Bump socket.io-parser from 3.3.2 to 3.3.3

nzinov/phystech-seabattle #20

3.3.2 → 3.3.3 Patch PR
Closed about 3 years ago
nzinov
Bump socket.io-parser from 4.0.4 to 4.0.5

Apollon77/ioBroker.daikin #156

4.0.4 → 4.0.5 Patch PR
Open about 3 years ago 2 comments
Apollon77
build(deps): bump socket.io-parser from 3.3.2 to 3.3.3 in /javascript-modules

CloudCannon/bookshop #121

3.3.2 → 3.3.3 Patch PR
Closed about 3 years ago 1 comment
CloudCannon
Bump socket.io-parser from 4.0.4 to 4.0.5 in /2022-week-16/security-ci-cd

coopnorge/demos #33

4.0.4 → 4.0.5 Patch PR
Merged about 3 years ago
coopnorge
Bump socket.io-parser from 3.3.0 to 3.3.3

jprimke/htl-leo-csharp-4 #6

3.3.0 → 3.3.3 Patch PR
Closed about 3 years ago 1 comment
jprimke
Bump socket.io-parser from 3.3.2 to 3.3.3

cmunozgar/web #16

3.3.2 → 3.3.3 Patch PR
Closed about 3 years ago 1 comment
cmunozgar
Bump socket.io-parser from 3.3.0 to 3.3.3 in /din-frontend

dkr7tech/din #48

3.3.0 → 3.3.3 Patch PR
Closed about 3 years ago
dkr7tech
Bump socket.io-parser from 3.3.2 to 3.3.3

tkxkd0159/tkxkd0159.github.io #23

3.3.2 → 3.3.3 Patch PR
Closed about 3 years ago 1 comment
tkxkd0159
Bump socket.io-parser from 3.3.2 to 3.3.3

javan/details-element-polyfill #85

3.3.2 → 3.3.3 Patch PR
Closed about 3 years ago
javan
Bump socket.io-parser from 4.0.4 to 4.0.5 in /frontend

Teknologforeningen/barsborsen #66

4.0.4 → 4.0.5 Patch PR
Closed about 3 years ago 1 comment
Teknologforeningen
fix(deps): bump socket.io-parser from 3.3.2 to 3.3.3

nhj7/cocomon_fe #322

3.3.2 → 3.3.3 Patch PR
Closed about 3 years ago
nhj7
Bump socket.io-parser from 4.0.4 to 4.0.5 in /web

janerist/dsjtournaments #47

4.0.4 → 4.0.5 Patch PR
Closed about 3 years ago 1 comment
janerist
Bump socket.io-parser from 4.0.4 to 4.0.5 in /admin-web

janerist/dsjtournaments #46

4.0.4 → 4.0.5 Patch PR
Closed about 3 years ago
janerist
Bump socket.io-parser from 3.3.0 to 3.3.3 in /frontend

eulersson/dreamdrugs #80

3.3.0 → 3.3.3 Patch PR
Closed about 3 years ago 1 comment
eulersson
Bump socket.io-parser from 3.3.0 to 3.3.2

marcelobuzzetti/Controle #7

3.3.0 → 3.3.2 Patch PR
Closed over 4 years ago 1 comment
marcelobuzzetti
Package Details
Name: socket.io-parser
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/socket.io-parser
JSON API: View JSON
Security Advisories

3

Active advisories
CRITICAL 1
HIGH 1
MODERATE 1
View All npm Advisories
Package Information
Description:

socket.io protocol parser

Repository: https://github.com/Automattic/socket.io-parser
Homepage: https://github.com/Automattic/socket.io-parser#readme
Latest Release: 4.2.4
over 2 years ago
Dependent Repos: 1,259,292
Dependent Packages: 303
Downloads: 44,217,820
Ranking: Top 0.0276% by dependent repos Top 0.0459% by downloads Top 0.1696% by dependent pkgs
PR Status
Open 170 (46.6%)
Merged 48 (13.2%)
Closed 119 (32.6%)
PR Types
Minor 60 (16.4%)
Major 104 (28.5%)
Patch 170 (46.6%)