Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:npm/socket.io@0.9.14
purl pkg:npm/socket.io@0.9.14
Next non-vulnerable version 2.5.1
Latest non-vulnerable version 4.6.2
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-nng4-5svn-jkdj
Aliases:
CVE-2024-38355
GHSA-25hc-qcg6-38wj
3.0.0-rc1
Affected by 0 other vulnerabilities.
2.5.1
Affected by 0 other vulnerabilities.
4.6.2
Affected by 0 other vulnerabilities.
VCID-tp54-xkwv-ybb4
Aliases:
CVE-2020-28481
GHSA-fxwf-4rqh-v8g3
2.4.0
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-fghz-bhwx-pbhb Memory leak when using HTTPS Socket.io will leak memory if used with HTTPS. This version seems to fix also other memory issues, even if HTTPS is not used. GMS-2013-7

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-01T08:08:22.785150+00:00 GitLab Importer Affected by VCID-nng4-5svn-jkdj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/socket.io/CVE-2024-38355.yml 38.6.0
2026-06-01T06:01:02.233717+00:00 GitLab Importer Affected by VCID-tp54-xkwv-ybb4 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/socket.io/CVE-2020-28481.yml 38.6.0
2026-05-30T20:51:59.548583+00:00 GitLab Importer Fixing VCID-fghz-bhwx-pbhb https://gitlab.com/gitlab-org/advisories-community/-/blob/main/npm/socket.io/GMS-2013-7.yml 38.6.0