CVE-2023-32695

socket.io parser is a socket.io encoder and decoder written in JavaScript complying with version 5 of socket.io-protocol. A specially crafted Socket.IO packet can trigger an uncaught exception on the Socket.IO server, thus killing the Node.js process. A patch has been released in version 4.2.3.

• CWE-20
• CWE-754

• https://github.com/socketio/socket.io-parser/commit/2dc3c92622dad113b8676be06f23b1ed46b02cedPatch
• https://github.com/socketio/socket.io-parser/commit/3b78117bf6ba7e99d7a5cfc1ba54d0477554a7f3Patch
• https://github.com/socketio/socket.io-parser/releases/tag/4.2.3Release Notes
• https://github.com/socketio/socket.io-parser/security/advisories/GHSA-cqmj-92xf-r6r9Vendor Advisory
• https://github.com/socketio/socket.io-parser/commit/2dc3c92622dad113b8676be06f23b1ed46b02cedPatch
• https://github.com/socketio/socket.io-parser/commit/3b78117bf6ba7e99d7a5cfc1ba54d0477554a7f3Patch
• https://github.com/socketio/socket.io-parser/releases/tag/4.2.3Release Notes
• https://github.com/socketio/socket.io-parser/security/advisories/GHSA-cqmj-92xf-r6r9Vendor Advisory

Published

May 27, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-3269A vulnerability exists in the memory management subsystem of…7.8
• CVE-2023-32690libspdm is a sample implementation that follows the DMTF SPD…7.5
• CVE-2023-32691gost (GO Simple Tunnel) is a simple tunnel written in golang…5.9
• CVE-2023-32692CodeIgniter is a PHP full-stack web framework. This vulnerab…9.8
• CVE-2023-32693Decidim is a participatory democracy framework, written in R…6.1
• CVE-2023-32694Saleor Core is a composable, headless commerce API. Saleor's…5.4
• CVE-2023-32696CKAN is an open-source data management system for powering d…8.8
• CVE-2023-32697SQLite JDBC is a library for accessing and creating SQLite d…9.8
• CVE-2023-32698nFPM is an alternative to fpm. The file permissions on the c…7.1
• CVE-2023-32699MeterSphere is an open source continuous testing platform. V…6.5
• CVE-2023-3270Exposure of Sensitive Information to an Unauthorized Actor i…7.5
• CVE-2023-32700LuaTeX before 1.17.0 allows execution of arbitrary shell com…7.8