Debian Patches
Status for node-socket.io-parser/4.2.4+~3.1.2-2
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| CVE-2026-33151.patch | Limit the number of binary attachments per packet (CVE-2026-33151) A specially crafted Socket.IO packet can make the server wait for a large number of binary attachments and buffer them, which can be exploited to make the server run out of memory. Add a configurable maxAttachments option (default: 10) to the Decoder class. |
no | debian | upstream, https://github.com/socketio/socket.io/commit/b25738c416c4e32fbff62ee182afa8f6d0dacf78 | ||
| ts6-tsconfig.patch | fix build with TypeScript 6 Set "rootDir" explicitly, restore the previous default of "strict" and declare the node types, TypeScript 6 no longer scanning node_modules/@types. |
Xavier Guimard <yadd@debian.org> | not-needed | 2026-08-16 |
All known versions for source package 'node-socket.io-parser'
- 4.2.4+~3.1.2-2 (sid)
- 4.2.4+~3.1.2-1 (forky)
- 4.2.1+~3.1.0-3 (trixie)
- 4.2.1+~3.1.0-2 (bookworm)