← All advisories

High severity7.5NVD Advisory· Published Jan 8, 2021· Updated Jun 17, 2026

CVE-2020-36048

CVE-2020-36048

Description

Engine.IO before 4.0.0 allows attackers to cause a denial of service (resource consumption) via a POST request to the long polling transport.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
engine.ionpm	< 3.6.0	3.6.0

Affected products

3

Socket/Engine.io
cpe:2.3:a:socket:engine.io:*:*:*:*:*:*:*:*
Range: <4.0.0
Engine.IO/Engine.IOdescription
ghsa-coords
pkg:npm/engine.io
Range: < 3.6.0

Patches

Vulnerability mechanics

References

6

github.com/socketio/engine.io/commit/734f9d1268840722c41219e69eb58318e0b2ac6bnvdPatchThird Party AdvisoryWEB
blog.caller.xyz/socketio-engineio-dos/nvdExploitThird Party Advisory
github.com/advisories/GHSA-j4f2-536g-r55mghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2020-36048ghsaADVISORY
blog.caller.xyz/socketio-engineio-dosghsaWEB
github.com/socketio/engine.io/commit/58e274c437e9cbcf69fd913c813aad8fbd253703ghsaWEB

News mentions

0

No linked articles in our index yet.