Socket.io-Parser vulnerabilities
1 known vulnerability in Socket.io-Parser from Socket.io. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
Socket.io-Parser: Improper Neutralization of Special Elements used in an SQL Command
Due to improper type validation in attachment parsing the Socket.io js library, it is possible to overwrite the _placeholder object which allows an attacker to place references to functions at arbitrary places in the resulting query object.