Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2020-28481

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-fxwf-4rqh-v8g3

CORS misconfiguration in socket.io The package socket.io before 2.4.0 are vulnerable to Insecure Defaults due to CORS Misconfiguration. All domains are whitelisted by default.

gitlab/npm/socket.io/CVE-2020-28481

Origin Validation Error The package `socket.io` are vulnerable to Insecure Defaults due to CORS Misconfiguration.