CVE-2020-36049

Published January 8th, 2021

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

MEDIUM

Affected

PROJECTS

Description

socket.io-parser before 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large packet because a concatenation approach is used.

socketio/socket.io-parser

GitHub

140

bcaller/kill-engine-io

DoS python-engineio / socketio via the long polling transport

GitHub