Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

socket.io-parser

Ecosystem:
npm
Package URL:
pkg:npm/socket.io-parser
Total PRs:
282 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
233 repositories
Unique Repos (30 days):
33 repositories
Security Advisories
Resource exhaustion in socket.io-parser
GHSA-xfhh-g9f5-x4m4 CVE-2020-36049 HIGH published about 4 years ago • updated 3 months ago
The `socket.io-parser` npm package before versions 3.3.2 and 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large p...
Insufficient validation when decoding a Socket.IO packet
GHSA-qm95-pgcg-qqfq CVE-2022-2421 CRITICAL published almost 3 years ago • updated 24 days ago
Due to improper type validation in the `socket.io-parser` library (which is used by the `socket.io` and `socket.io-client` packages to encode and d...
Insufficient validation when decoding a Socket.IO packet
GHSA-cqmj-92xf-r6r9 CVE-2023-32695 MODERATE published over 2 years ago • updated 3 months ago
### Impact A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. ``` ...
Recent PRs (filtered by: Merged , Minor PRs )
RSS Feed Clear filter
chore(deps): bump socket.io-parser

colabottles/multiplayergamefcc #11

3.3.0 → 3.4.3 Minor PR
Merged about 1 month ago 2 comments
colabottles
Bump socket.io-parser

Mikek2252/Window-Calculator #27

3.3.1 → 3.4.3 Minor PR
Merged about 2 months ago
Mikek2252
Bump socket.io-parser

visoft/ember_octane_cranking_to_11 #9

3.3.0 → 3.4.3 Minor PR
Merged about 2 months ago 1 comment
visoft
Bump socket.io-parser

digital-codes/lerninsel-ors #11

3.3.2 → 3.4.3 Minor PR
Merged 2 months ago
digital-codes
Bump socket.io-parser and socket.io in /image-uploader

00Arun/AngularImageUploader #14

4.0.4 → 4.2.4 Minor PR
Merged 2 months ago
00Arun
Bump socket.io-parser from 3.3.3 to 3.4.3 in /mur_server/gui/udrobot

juanscelyg/mur #26

3.3.3 → 3.4.3 Minor PR
Merged 2 months ago
juanscelyg
Bump socket.io-parser from 4.0.4 to 4.2.4

ocbtec/portfolio #38

4.0.4 → 4.2.4 Minor PR
Merged 3 months ago
ocbtec
Bump socket.io-parser from 3.3.3 to 3.4.3

jpfeiffer16/Wanderer #39

3.3.3 → 3.4.3 Minor PR
Merged 3 months ago
jpfeiffer16
Bump socket.io-parser and socket.io

midorichan/reacting #5

3.2.0 → 3.4.3 Minor PR
Merged 3 months ago
midorichan
Bump socket.io-parser and socket.io

ionic-enterprise/cs-autofill-credendials #6

4.0.4 → 4.2.4 Minor PR
Merged 3 months ago
ionic-enterprise
Bump socket.io-parser and socket.io in /docs

appatalks/hubble #9

4.0.4 → 4.2.4 Minor PR
Merged 3 months ago
appatalks
Bump the npm_and_yarn group with 21 updates

ministryofjustice/hmpps-matching-prototype #49

4.0.4 → 4.2.4 Minor PR
Merged 4 months ago
ministryofjustice
Bump socket.io-parser and socket.io in /frontend

iconben/loyalty-tiers #4

4.0.4 → 4.2.4 Minor PR
Merged 4 months ago
iconben
Bump socket.io-parser and socket.io-client

wmacomber/hopp #10

4.0.5 → 4.2.4 Minor PR
Merged 10 months ago
wmacomber
Package Details
Name: socket.io-parser
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/socket.io-parser
JSON API: View JSON
Security Advisories

3

Active advisories
CRITICAL 1
HIGH 1
MODERATE 1
View All npm Advisories
Package Information
Description:

socket.io protocol parser

Repository: https://github.com/Automattic/socket.io-parser
Homepage: https://github.com/Automattic/socket.io-parser#readme
Latest Release: 4.2.4
over 2 years ago
Dependent Repos: 1,259,292
Dependent Packages: 303
Downloads: 44,217,820
Ranking: Top 0.0276% by dependent repos Top 0.0459% by downloads Top 0.1696% by dependent pkgs
PR Status
Open 132 (46.8%)
Merged 38 (13.5%)
Closed 84 (29.8%)
PR Types
Minor 55 (19.5%)
Major 77 (27.3%)
Patch 120 (42.6%)