Skip to content
Threat Feed
Subscribe

Product

Engine.io (>= 6.6.0, < 6.6.10)

1 brief RSS
medium advisory

Engine.IO Protocol Revision Mismatch Denial of Service

A denial-of-service vulnerability in Engine.IO versions 6.6.0 through 6.6.9 allows remote attackers to crash Node.js processes by sending crafted WebSocket upgrade requests with mismatched protocol parameters.

engine.io
1t