Skip to content
Threat Feed
Subscribe

Product

Cluster-Engine (< 0.1.1)

1 brief RSS
low advisory

Prototype Pollution in @socket.io/cluster-engine

The @socket.io/cluster-engine package is vulnerable to prototype pollution when processing attacker-controlled session IDs, allowing an attacker to cause a denial of service via process crash.

cluster-engine nodejs vulnerability prototype-pollution dos
1c