Vulnerability	Vulnerable Version
C Improper Input Validation socket.io-parser is a socket.io protocol parser Affected versions of this package are vulnerable to Improper Input Validation. when parsing attachments containing untrusted user input. Attackers can overwrite the `_placeholder` object to place references to functions in query objects. How to fix Improper Input Validation? Upgrade `socket.io-parser` to version 3.3.3, 3.4.2, 4.0.5, 4.2.1 or higher.	<3.3.3>=3.4.0 <3.4.2>=4.0.0 <4.0.5>=4.1.0 <4.2.1
H Denial of Service (DoS) socket.io-parser is a socket.io protocol parser Affected versions of this package are vulnerable to Denial of Service (DoS) via a large packet because a concatenation approach is used. How to fix Denial of Service (DoS)? Upgrade `socket.io-parser` to version 3.3.2, 3.4.1 or higher.	<3.3.2>3.4.0 <3.4.1

Improper Input Validation

socket.io-parser is a socket.io protocol parser

Affected versions of this package are vulnerable to Improper Input Validation. when parsing attachments containing untrusted user input. Attackers can overwrite the _placeholder object to place references to functions in query objects.

How to fix Improper Input Validation?

Upgrade socket.io-parser to version 3.3.3, 3.4.2, 4.0.5, 4.2.1 or higher.

<3.3.3>=3.4.0 <3.4.2>=4.0.0 <4.0.5>=4.1.0 <4.2.1

Denial of Service (DoS)

socket.io-parser is a socket.io protocol parser

Affected versions of this package are vulnerable to Denial of Service (DoS) via a large packet because a concatenation approach is used.

How to fix Denial of Service (DoS)?

Upgrade socket.io-parser to version 3.3.2, 3.4.1 or higher.

<3.3.2>3.4.0 <3.4.1

Go back to all versions of this package