Search for packages
| purl | pkg:npm/console-io@1.6.2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-4rj6-rnk2-fuau
Aliases: CVE-2016-10532 GHSA-q52j-4q2q-hcj6 |
Improper Authentication console-io is a module that allows users to implement a web console in their application. A malicious user could bypass the authentication and execute any command that the user who is running the console-io application 2.2.13 and earlier is able to run. This means that if console-io was running from root, the attacker would have full access to the system. This vulnerability exists because the console-io application does not configure socket.io to require authentication, which allows a malicious user to connect via a websocket to send commands and receive the response. |
Affected by 1 other vulnerability. |
|
VCID-tfyr-1crx-7qat
Aliases: GMS-2016-22 |
Authentication Bypass A malicious user could bypass the authentication and execute any command that the user who is running the console-io application is able to run. This means that if console-io was running from root, the attacker would have full access to the system. This vulnerability exists because the application does not configure socket.io to require authentication, which allows a malicious user to connect via a websocket to send commands and receive the response. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-04T20:19:21.674316+00:00 | GitLab Importer | Affected by | VCID-4rj6-rnk2-fuau | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/console-io/CVE-2016-10532.yml | 38.6.0 |
| 2026-06-04T20:05:49.289913+00:00 | GitLab Importer | Affected by | VCID-tfyr-1crx-7qat | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/console-io/GMS-2016-22.yml | 38.6.0 |