Search for packages
| purl | pkg:npm/console-io@2.3.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-jhm6-9zsn-v7c4
Aliases: GMS-2016-22 |
Authentication Bypass A malicious user could bypass the authentication and execute any command that the user who is running the console-io application is able to run. This means that if console-io was running from root, the attacker would have full access to the system. This vulnerability exists because the application does not configure socket.io to require authentication, which allows a malicious user to connect via a websocket to send commands and receive the response. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-8att-j61t-7ycp | Authentication Bypass in console-io |
CVE-2016-10532
GHSA-q52j-4q2q-hcj6 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-12T16:50:01.700078+00:00 | GitLab Importer | Affected by | VCID-jhm6-9zsn-v7c4 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/console-io/GMS-2016-22.yml | 38.6.0 |
| 2026-06-12T15:41:30.648325+00:00 | GitLab Importer | Fixing | VCID-8att-j61t-7ycp | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/console-io/CVE-2016-10532.yml | 38.6.0 |
| 2026-06-12T08:11:11.319262+00:00 | GithubOSV Importer | Fixing | VCID-8att-j61t-7ycp | https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/02/GHSA-q52j-4q2q-hcj6/GHSA-q52j-4q2q-hcj6.json | 38.6.0 |
| 2026-06-11T20:25:02.026028+00:00 | GHSA Importer | Fixing | VCID-8att-j61t-7ycp | https://github.com/advisories/GHSA-q52j-4q2q-hcj6 | 38.6.0 |