Unhandled 'error' event in socket.io

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2024-38355 · CVE overview and exploitation status

EUVD-2024-1878

GHSA-25hc-qcg6-38wj

cve-program · CVE-2024-38355

• https://github.com/socketio/socket.io/security/advisories/GHSA-25hc-qcg6-38wj
• https://github.com/socketio/socket.io/commit/15af22fc22bc6030fcead322c106f07640336115
• https://github.com/socketio/socket.io/commit/d30630ba10562bf987f4d2b42440fc41a828119c

euvd · EUVD-2024-1878

• https://github.com/socketio/socket.io/security/advisories/GHSA-25hc-qcg6-38wj
• https://github.com/socketio/socket.io/commit/15af22fc22bc6030fcead322c106f07640336115
• https://github.com/socketio/socket.io/commit/d30630ba10562bf987f4d2b42440fc41a828119c

nvd · CVE-2024-38355

• https://github.com/socketio/socket.io/commit/15af22fc22bc6030fcead322c106f07640336115
• https://github.com/socketio/socket.io/commit/d30630ba10562bf987f4d2b42440fc41a828119c
• https://github.com/socketio/socket.io/security/advisories/GHSA-25hc-qcg6-38wj
• https://www.vicarius.io/vsociety/posts/unhandled-exception-in-socketio-cve-2024-38355

osv · GHSA-25hc-qcg6-38wj

• https://github.com/socketio/socket.io/security/advisories/GHSA-25hc-qcg6-38wj
• https://nvd.nist.gov/vuln/detail/CVE-2024-38355
• https://github.com/socketio/socket.io/commit/15af22fc22bc6030fcead322c106f07640336115
• https://github.com/socketio/socket.io/commit/d30630ba10562bf987f4d2b42440fc41a828119c
• https://github.com/socketio/socket.io

No related changes are available here.