bcaller/kill-engine-io

bcaller/kill-engine-io

GitHubGitHub
GitHubgithub.com
Releases0
Stars7
DoS python-engineio / socketio via the long polling transport
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-36048↗
7.5 HIGH5 MEDIUM

Engine.IO before 4.0.0 allows attackers to cause a denial of service (resource consumption) via a POST request to the long polling transport.

CVE-2020-36049↗
7.5 HIGH5 MEDIUM

socket.io-parser before 3.4.1 allows attackers to cause a denial of service (memory consumption) via a large packet because a concatenation approach is used.