{"api_version":"v1","generated_at":"2026-10-05T10:20:00+00:00","product":{"cve_count":6,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-socketio-socket-io-3ff1e30baca7","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/socket.io","name":"socket.io","next_cursor":null,"observations":[{"affected":"socket.io: < 0.1.1; cluster-engine: < 0.1.1","affected_versions_present":true,"cve_id":"CVE-2026-102600","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-102600","fixed":"0.1.1.","last_modified":"2026-09-29T16:28:28.476Z","patch_url":"https://github.com/socketio/socket.io/security/advisories/GHSA-wfpm-5gcm-94cg","primary_source":"","published":"2026-09-29T15:23:15.857Z"},{"affected":"< 3.3.6; >= 3.4.0, < 3.4.5; >= 4.0.0, < 4.2.7","affected_versions_present":true,"cve_id":"CVE-2026-69185","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-69185","fixed":"No fixed version is explicitly recorded in the structured CVE data.","last_modified":"2026-08-03T20:31:54.428Z","patch_url":"","primary_source":"","published":"2026-08-03T19:09:10.073Z"},{"affected":">= 4.1.0, < 6.6.7","affected_versions_present":true,"cve_id":"CVE-2026-59725","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59725","fixed":"6.6.7.","last_modified":"2026-07-08T17:00:32.946Z","patch_url":"https://github.com/socketio/socket.io/security/advisories/GHSA-r635-g3xr-vw7x","primary_source":"","published":"2026-07-08T15:37:52.293Z"},{"affected":">= 6.5.0, < 6.6.7","affected_versions_present":true,"cve_id":"CVE-2026-59724","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-59724","fixed":"6.6.7.","last_modified":"2026-07-08T19:41:18.905Z","patch_url":"https://github.com/socketio/socket.io/security/advisories/GHSA-gr94-w7qr-f4j3","primary_source":"","published":"2026-07-08T15:35:39.813Z"},{"affected":"< 3.3.5; >= 3.4.0, < 3.4.4; >= 4.0.0, < 4.2.6","affected_versions_present":true,"cve_id":"CVE-2026-33151","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-33151","fixed":"Users are strongly recommended to upgrade the Software Deployment Manager extension for Sentio Creator to version 0.14.0.","last_modified":"2026-03-23T16:50:16.998Z","patch_url":"https://www.sick.com/psirt","primary_source":"","published":"2026-03-20T20:13:31.424Z"},{"affected":"< 2.5.1; >= 3.0.0,< 4.6.2","affected_versions_present":true,"cve_id":"CVE-2024-38355","cve_url":"https://cve.blacktree.nl/cve/CVE-2024-38355","fixed":"Update to V0.0.6 or later version","last_modified":"2024-09-03T20:35:40.515Z","patch_url":"https://cert-portal.siemens.com/productcert/html/ssa-773256.html","primary_source":"","published":"2024-06-19T19:48:50.193Z"}],"source_generated_at":"2026-10-05T06:20:29.126Z","vendor":"socketio"}}