Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:npm/socket.io-parser@3.4.0
Typenpm
Namespace
Namesocket.io-parser
Version3.4.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3.4.3
Latest_non_vulnerable_version4.2.3
Affected_by_vulnerabilities
0
url VCID-j66a-3fjk-9qg3
vulnerability_id VCID-j66a-3fjk-9qg3
summary 
Insufficient validation when decoding a Socket.IO packet
A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process.

```
TypeError: Cannot convert object to primitive value
at Socket.emit (node:events:507:25)
at .../node_modules/socket.io/lib/socket.js:531:14
```
references
0
reference_url https://github.com/socketio/socket.io-parser
reference_id
reference_type
scores
url https://github.com/socketio/socket.io-parser
1
reference_url https://github.com/socketio/socket.io-parser/commit/1c220ddbf45ea4b44bc8dbf6f9ae245f672ba1b9
reference_id
reference_type
scores
url https://github.com/socketio/socket.io-parser/commit/1c220ddbf45ea4b44bc8dbf6f9ae245f672ba1b9
2
reference_url https://github.com/socketio/socket.io-parser/commit/2dc3c92622dad113b8676be06f23b1ed46b02ced
reference_id
reference_type
scores
url https://github.com/socketio/socket.io-parser/commit/2dc3c92622dad113b8676be06f23b1ed46b02ced
3
reference_url https://github.com/socketio/socket.io-parser/commit/3b78117bf6ba7e99d7a5cfc1ba54d0477554a7f3
reference_id
reference_type
scores
url https://github.com/socketio/socket.io-parser/commit/3b78117bf6ba7e99d7a5cfc1ba54d0477554a7f3
4
reference_url https://github.com/socketio/socket.io-parser/commit/ee006607495eca4ec7262ad080dd3a91439a5ba4
reference_id
reference_type
scores
url https://github.com/socketio/socket.io-parser/commit/ee006607495eca4ec7262ad080dd3a91439a5ba4
5
reference_url https://github.com/socketio/socket.io-parser/releases/tag/4.2.3
reference_id
reference_type
scores
url https://github.com/socketio/socket.io-parser/releases/tag/4.2.3
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2023-32695
reference_id CVE-2023-32695
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2023-32695
7
reference_url https://github.com/advisories/GHSA-cqmj-92xf-r6r9
reference_id GHSA-cqmj-92xf-r6r9
reference_type
scores
url https://github.com/advisories/GHSA-cqmj-92xf-r6r9
8
reference_url https://github.com/socketio/socket.io-parser/security/advisories/GHSA-cqmj-92xf-r6r9
reference_id GHSA-cqmj-92xf-r6r9
reference_type
scores
url https://github.com/socketio/socket.io-parser/security/advisories/GHSA-cqmj-92xf-r6r9
fixed_packages
0
url pkg:npm/socket.io-parser@3.4.3
purl pkg:npm/socket.io-parser@3.4.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/socket.io-parser@3.4.3
1
url pkg:npm/socket.io-parser@4.2.3
purl pkg:npm/socket.io-parser@4.2.3
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:npm/socket.io-parser@4.2.3
aliases CVE-2023-32695, GHSA-cqmj-92xf-r6r9
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-j66a-3fjk-9qg3
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:npm/socket.io-parser@3.4.0