socket.io allows an unbounded number of binary attachments

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-33151 · CVE overview and exploitation status

EUVD-2026-13788

GHSA-677m-j7p3-52f9

cve-program · CVE-2026-33151

• https://github.com/socketio/socket.io/security/advisories/GHSA-677m-j7p3-52f9
• https://github.com/socketio/socket.io/commit/719f9ebab0772ffb882bd614b387e585c1aa75d4
• https://github.com/socketio/socket.io/commit/9d39f1f080510f036782f2177fac701cc041faaf
• https://github.com/socketio/socket.io/commit/b25738c416c4e32fbff62ee182afa8f6d0dacf78

euvd · EUVD-2026-13788

• https://github.com/socketio/socket.io/security/advisories/GHSA-677m-j7p3-52f9
• https://github.com/socketio/socket.io/commit/719f9ebab0772ffb882bd614b387e585c1aa75d4
• https://github.com/socketio/socket.io/commit/9d39f1f080510f036782f2177fac701cc041faaf
• https://github.com/socketio/socket.io/commit/b25738c416c4e32fbff62ee182afa8f6d0dacf78

nvd · CVE-2026-33151

• https://github.com/socketio/socket.io/commit/719f9ebab0772ffb882bd614b387e585c1aa75d4
• https://github.com/socketio/socket.io/commit/9d39f1f080510f036782f2177fac701cc041faaf
• https://github.com/socketio/socket.io/commit/b25738c416c4e32fbff62ee182afa8f6d0dacf78
• https://github.com/socketio/socket.io/security/advisories/GHSA-677m-j7p3-52f9

osv · GHSA-677m-j7p3-52f9

• https://github.com/socketio/socket.io/security/advisories/GHSA-677m-j7p3-52f9
• https://nvd.nist.gov/vuln/detail/CVE-2026-33151
• https://github.com/socketio/socket.io/commit/719f9ebab0772ffb882bd614b387e585c1aa75d4
• https://github.com/socketio/socket.io/commit/9d39f1f080510f036782f2177fac701cc041faaf
• https://github.com/socketio/socket.io/commit/b25738c416c4e32fbff62ee182afa8f6d0dacf78
• https://github.com/socketio/socket.io

No related changes are available here.