← Back

Socket.io File

socket.io-file

Vendor: Socket.io File Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-24807
1Socket.io File Project
1Socket.io File
Jun 17, 2026
Oct 6, 2020
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
The socket.io-file package through 2.0.31 for Node.js relies on client-side validation of file types, which allows remote attackers to execute arbitrary code by uploading an executable file via a modified JSON name field...Show more
The socket.io-file package through 2.0.31 for Node.js relies on client-side validation of file types, which allows remote attackers to execute arbitrary code by uploading an executable file via a modified JSON name field. NOTE: This vulnerability only affects products that are no longer supported by the maintainerShow less
CVE-2020-15779
1Socket.io File Project
1Socket.io File
Jun 17, 2026
Jul 15, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A Path Traversal issue was discovered in the socket.io-file package through 2.0.31 for Node.js. The socket.io-file::createFile message uses path.join with ../ in the name option, and the uploadDir and rename options dete...Show more
A Path Traversal issue was discovered in the socket.io-file package through 2.0.31 for Node.js. The socket.io-file::createFile message uses path.join with ../ in the name option, and the uploadDir and rename options determine the path.Show less