[Git][security-tracker-team/security-tracker][master] Add CVE-2026-69185/node-socket.io-parser

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
e44e2c7d by Salvatore Bonaccorso at 2026-08-04T12:53:54+02:00
Add CVE-2026-69185/node-socket.io-parser

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -62,7 +62,11 @@ CVE-2026-69192 (ip-address is a library for parsing and manipulating IPv4 and IP
 	NOTE: https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr
 	NOTE: Fixed by: https://github.com/beaugunderson/ip-address/commit/56368cb3d66c73ba0ee9b6b834fd31b22c2fd71e (v10.3.1)
 CVE-2026-69185 (Socket.IO enables bidirectional and low-latency communication for ever ...)
-	TODO: check
+	- node-socket.io-parser <unfixed>
+	NOTE: https://github.com/socketio/socket.io/security/advisories/GHSA-2m8v-j782-fhvr
+	NOTE: Fixed by: https://github.com/socketio/socket.io/commit/7c6ef571a00656718e9e05e3b948fd1758b2a7b4 (socket.io-parser at 4.2.7)
+	NOTE: Fixed by: https://github.com/socketio/socket.io/commit/ced94ffa3ac020a8f3c14eb98a3bf34acb14d291 (socket.io-parser at 3.4.5)
+	NOTE: Fixed by: https://github.com/socketio/socket.io/commit/9c6323e5cde41bd75df3379b5fc9293664a5f240 (socket.io-parser at 3.3.6)
 CVE-2026-68981 (Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests fo ...)
 	NOT-FOR-US: Apache software not packaged in Debian
 CVE-2026-68980 (Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleti ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e44e2c7d8178a6c72506c94eba7c183be1e282cb

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/e44e2c7d8178a6c72506c94eba7c183be1e282cb
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260804/c18f2734/attachment-0001.htm>