Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

socket.io-parser

Ecosystem:
npm
Package URL:
pkg:npm/socket.io-parser
Total PRs:
282 Dependabot PRs
Latest PR:
1 day ago
Unique Repositories:
233 repositories
Unique Repos (30 days):
33 repositories
Security Advisories
Resource exhaustion in socket.io-parser
GHSA-xfhh-g9f5-x4m4 CVE-2020-36049 HIGH published about 4 years ago • updated 3 months ago
The `socket.io-parser` npm package before versions 3.3.2 and 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large p...
Insufficient validation when decoding a Socket.IO packet
GHSA-qm95-pgcg-qqfq CVE-2022-2421 CRITICAL published almost 3 years ago • updated 25 days ago
Due to improper type validation in the `socket.io-parser` library (which is used by the `socket.io` and `socket.io-client` packages to encode and d...
Insufficient validation when decoding a Socket.IO packet
GHSA-cqmj-92xf-r6r9 CVE-2023-32695 MODERATE published over 2 years ago • updated 3 months ago
### Impact A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. ``` ...
Recent PRs (filtered by: Merged , Patch PRs )
RSS Feed Clear filter
Bump socket.io-parser from 4.2.1 to 4.2.4 in /frontend

postsai/postsai #1439

4.2.1 → 4.2.4 Patch PR
Merged 30 days ago
postsai
Bump socket.io-parser from 4.2.2 to 4.2.4

ebaudet/DemoShrine #5

4.2.2 → 4.2.4 Patch PR
Merged about 2 months ago
ebaudet
Bump socket.io-parser from 3.3.0 to 3.3.4

spences10/gatsby-theme-blagnum #9

3.3.0 → 3.3.4 Patch PR
Merged 2 months ago
spences10
Bump socket.io-parser from 3.4.1 to 3.4.3

necastle88/gatsby-blog #15

3.4.1 → 3.4.3 Patch PR
Merged 3 months ago
necastle88
chore(deps): bump socket.io-parser and socket.io in /docs

centrica-engineering/muon #653

4.2.0 → 4.2.4 Patch PR
Merged 3 months ago
centrica-engineering
Bump socket.io-parser from 3.3.0 to 3.3.4 in /web

anistark/sanity-gatsby-graphql-blog #21

3.3.0 → 3.3.4 Patch PR
Merged 3 months ago
anistark
Bump socket.io-parser from 4.2.1 to 4.2.4 in /Financier.Web/ClientApp

JonnyRivers/Financier #190

4.2.1 → 4.2.4 Patch PR
Merged 3 months ago
JonnyRivers
Bump socket.io-parser from 3.3.3 to 3.3.4 in the npm_and_yarn group

dataTimeSpace/vuforia-spatial-remote-operator-addon #8

3.3.3 → 3.3.4 Patch PR
Merged 4 months ago
dataTimeSpace
Bump the npm_and_yarn group across 1 directory with 5 updates

Uniquegrl/supreme-computing-machine #1

4.2.2 → 4.2.4 Patch PR
Merged 5 months ago
Uniquegrl
chore: bump socket.io-parser from 3.3.3 to 3.3.4

endojs/endo #2573

3.3.3 → 3.3.4 Patch PR
Merged 11 months ago
endojs
Bump socket.io-parser from 3.3.3 to 3.3.4

rtre84/test-sn-template-feature #26

3.3.3 → 3.3.4 Patch PR
Merged about 1 year ago
rtre84
Bump socket.io-parser from 3.3.3 to 3.3.4 in /electron-client

1996scarlet/ArcFace-Multiplex-Recognition #40

3.3.3 → 3.3.4 Patch PR
Merged about 1 year ago
1996scarlet
Bump socket.io-parser and socket.io

dlxks/cvsu-ees #24

4.2.2 → 4.2.4 Patch PR
Merged about 2 years ago
dlxks
Bump socket.io-parser from 4.2.2 to 4.2.4 in /src/main/ui

isuretpolos/AetherOnePi #75

4.2.2 → 4.2.4 Patch PR
Merged over 2 years ago
isuretpolos
Bump socket.io-parser from 4.2.2 to 4.2.3 in /Customer Service/Channel Integration Framework v2.0/ClickToDial

microsoft/Dynamics-365-FastTrack-Implementation-Assets #228

4.2.2 → 4.2.3 Patch PR
Merged over 2 years ago
microsoft
Bump socket.io-parser from 4.2.1 to 4.2.3 in /cursos-alura/angular/fundamentos/alurapic

jairosousa/cursos-alura #118

4.2.1 → 4.2.3 Patch PR
Merged over 2 years ago
jairosousa
Bump socket.io-parser from 4.0.4 to 4.0.5 in /2022-week-16/security-ci-cd

coopnorge/demos #33

4.0.4 → 4.0.5 Patch PR
Merged almost 3 years ago
coopnorge
Package Details
Name: socket.io-parser
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/socket.io-parser
JSON API: View JSON
Security Advisories

3

Active advisories
CRITICAL 1
HIGH 1
MODERATE 1
View All npm Advisories
Package Information
Description:

socket.io protocol parser

Repository: https://github.com/Automattic/socket.io-parser
Homepage: https://github.com/Automattic/socket.io-parser#readme
Latest Release: 4.2.4
over 2 years ago
Dependent Repos: 1,259,292
Dependent Packages: 303
Downloads: 44,217,820
Ranking: Top 0.0276% by dependent repos Top 0.0459% by downloads Top 0.1696% by dependent pkgs
PR Status
Open 132 (46.8%)
Merged 38 (13.5%)
Closed 84 (29.8%)
PR Types
Minor 55 (19.5%)
Major 77 (27.3%)
Patch 120 (42.6%)