https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T17:18:52.966636+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-09399 bdu:2026-09399 2026-10-02T17:18:53.075120+00:00 bdu:2026-09399 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0015 certfr-2024-avi-0015 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Elles permettent à un attaquant de provoquer… 2026-10-02T17:18:53.075161+00:00 certfr-2024-avi-0015 https://cve.radiocsirt.org/vuln/euvd-2026-210278 EUVD-2026-210278 2026-10-02T17:18:53.075190+00:00 EUVD-2026-210278 https://cve.radiocsirt.org/vuln/fkie_cve-2023-32695 fkie_cve-2023-32695 2026-10-02T17:18:53.075211+00:00

socket.io parser is a socket.io encoder and decoder written in JavaScript complying with version 5 of socket.io-protocol. A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. A patch has been released in version 4.2.3.

 https://cve.radiocsirt.org/vuln/ghsa-cqmj-92xf-r6r9 GHSA-cqmj-92xf-r6r9 — Insufficient validation when decoding a Socket.IO packet 2026-10-02T17:18:53.075265+00:00

Affected: npm: socket.io-parser

### Impact

A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process.

``` TypeError: Cannot convert object to primitive value at Socket.emit (node:events:507:25) at .../node_modules/socket.io/lib/socket.js:531:14 ```

### Patches

A fix has been released today (2023/05/22):

- https://github.com/socketio/socket.io-parser/commit/3b78117bf6ba7e99d7a5cfc1ba54d0477554a7f3, included in `socket.io-parser@4.2.3` - https://github.com/socketio/socket.io-parser/commit/2dc3c92622dad113b8676be06f23b1ed46b02ced, included in `socket.io-parser@3.4.3`

Another fix has been released for the `3.3.x` branch:

- https://github.com/socketio/socket.io-parser/commit/ee006607495eca4ec7262ad080dd3a91439a5ba4, included in `socket.io-parser@3.3.4

| `socket.io` version | `socket.io-parser` version | Needs minor update? | |---------------------|---------------------------------------------------------------------------------------------------------|--------------------------------------| | `4.5.2...latest` | `~4.2.0` ([ref](https://github.com/socketio/socket.io/commit/9890b036cf942f6b6ad2afeb6a8361c32cd5d528)) | `npm audit fix` should be sufficient | | `4.1.3...4.5.1` | `~4.1.1` ([ref](https://github.com/socketio/socket.io/commit/7c44893d7878cd5bba1eff43150c3e664f88fb57)) | Please upgrade to `socket.io@4.6.x` | | `3…

 https://cve.radiocsirt.org/vuln/gsd-2023-32695 gsd-2023-32695 2026-10-02T17:18:53.075315+00:00 gsd-2023-32695 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-32695 UBUNTU-CVE-2023-32695 2026-10-02T17:18:53.075328+00:00

Affected: Ubuntu:18.04:LTS: node-socket.io-parser, Ubuntu:20.04:LTS: node-socket.io-parser, Ubuntu:22.04:LTS: node-socket.io-parser, Ubuntu:24.04:LTS: node-socket.io-parser

socket.io parser is a socket.io encoder and decoder written in JavaScript complying with version 5 of socket.io-protocol. A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. A patch has been released in version 4.2.3.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1800 WID-SEC-W-2023-1800 — HCL BigFix: Mehrere Schwachstellen 2026-10-02T17:18:53.075353+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in HCL BigFix WebUI ausnutzen, um seine Privilegien zu erweitern, Dateien zu manipulieren, Informationen offenzulegen, Sicherheitsvorkehrungen zu umgehen oder einen Denial of Service Zustand herbeizuführen.