Socket: >> Socket.io >> 0.9.18 Security Vulnerabilities
The package socket.io before 2.4.0 are vulnerable to Insecure Defaults due to CORS Misconfiguration. All domains are whitelisted by default.
CVSS Score
5.3
EPSS Score
0.002
Published
2021-01-19