CVE-2023-32695
HighAdvisory
Published 23 May 2023In the index since 6 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.3
- base score, highest
- EPSS
- 0.011
- 63rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 55
- of 17,781 indexed, latest versions
- Container images
- 49
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Insufficient validation when decoding a Socket.IO packet
Carried by container images the latest versions of 55 of 17,781 indexed charts deploy, on 49 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| socket.io-parsernpm | 2.2.0, 2.2.2, 2.2.6, 2.3.1+13 more | 3.3.4, 3.4.3, 4.2.3 | 49 |
- OSV records
- GHSA-cqmj-92xf-r6r9
Charts affected
55 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| hedgedocvista | 0.1.1 | 1 of 1See more | 3,118 |
| resultappvoting-app-helm-charts-repoVerified publisher | 1.0.0 | 1 of 1See more | 1,263 |
| voteappvoting-app-helm-charts-repoVerified publisher | 1.0.0 | 1 of 5See more | 8,262 |
| resultappvoting-app-helm-charts-repo-cloudVerified publisher | 1.0.0 | 1 of 1See more | 1,263 |
| voteappvoting-app-helm-charts-repo-cloudVerified publisher | 1.0.0 | 1 of 5See more | 8,262 |
Container images carrying it
49 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| kodekloud/ | e510023fdf38 | socket.io-parser | 3.3.4 | 4 |
| pantsel/ | c8172b75607d | socket.io-parser | 3.3.4 | 3 |
| ghcr.io/ | a4a3639899f7 | socket.io-parser | 3.3.4 | 3 |
| outlinewiki/ | d060dcd8f9aa | socket.io-parser | 4.2.3 | 2 |
| quay.io/ | e09967519a1d | socket.io-parser | 3.4.3 | 2 |
| bastilimbach/ | 41b0835ab31e | socket.io-parser | 4.2.3 | 1 |
| bicarus/ | dab88659ae3b | socket.io-parser | 4.2.3 | 1 |
| catalysm/ | f003b35f54d9 | socket.io-parser | 3.4.3 | 1 |
| cnieg/ | 98ee05668915 | socket.io-parser | 3.3.4 | 1 |
| coderaiser/ | b34a9775c7ce | socket.io-parser | 4.2.3 | 1 |
| cryptexlabs/ | 189c07411d7c | socket.io-parser | 4.2.3 | 1 |
| datarhei/ | 655e12f9eeed | socket.io-parser | 3.4.3 | 1 |
| devkrishan001/ | f1c3acadeabe | socket.io-parser | 3.3.4 | 1 |
| frappe/ | 2095767a9e82 | socket.io-parser | 3.4.3 | 1 |
| heywood8/ | 0bc9ab313d37 | socket.io-parser | 4.2.3 | 1 |
| ianw/ | dc49dd460c37 | socket.io-parser | 3.3.4 | 1 |
| ibarreche/ | c8970ac1c8dc | socket.io-parser | 3.3.4 | 1 |
| ibmcom/ | ab3fd1fdfa18 | socket.io-parser | 3.3.4 | 1 |
| ibmcom/ | ed5505e5c7ec | socket.io-parser | 3.3.4 | 1 |
| inseefrlab/ | 31f04ca7436b | socket.io-parser | 3.3.4 | 1 |
| jakowenko/ | b858bac9e32a | socket.io-parser | 4.2.3 | 1 |
| jayfong/ | 163e5d621910 | socket.io-parser | 3.3.4 | 1 |
| konradkleine/ | 181aad54ee64 | socket.io-parser | 3.3.4 | 1 |
| kubevious/ | 9bf567704de2 | socket.io-parser | 4.2.3 | 1 |
| linuxserver/ | a847b5b2d860 | socket.io-parser | 4.2.3 | 1 |
| linuxserver/ | b801bbcf6386 | socket.io-parser | 3.3.4 | 1 |
| louislam/ | a4eab252e5a2 | socket.io-parser | 4.2.3 | 1 |
| louislam/ | a84767d7934f | socket.io-parser | 4.2.3 | 1 |
| nightscout/ | 00c3b4833f1b | socket.io-parser | 3.3.4 | 1 |
| nightscout/ | ad29ca7a4de6 | socket.io-parser | 4.2.3 | 1 |
| nightscout/ | f604dc4c03ca | socket.io-parser | 4.2.3 | 1 |
| openhab/ | 29dd2bac8c4b | socket.io-parser | 3.3.4 | 1 |
| phntom/ | 1b9aafbb62e6 | socket.io-parser | 3.3.4 | 1 |
| polonel/ | 0cf6513f6fe3 | socket.io-parser | 4.2.3 | 1 |
| samajh/ | ea742b4372ad | socket.io-parser | 3.3.4 | 1 |
| samajh/ | 05ef4fddbb75 | socket.io-parser | 3.3.4 | 1 |
| shinobisystems/ | 3ca746937856 | socket.io-parser | 3.4.3 | 1 |
| shinobisystems/ | c2f5ce2e1067 | socket.io-parser | 3.3.4 | 1 |
| thelounge/ | 0037aa258261 | socket.io-parser | 4.2.3 | 1 |
| thelounge/ | 639978459c3a | socket.io-parser | 3.3.4 | 1 |
| wiremind/ | e7048929a676 | socket.io-parser | 3.3.4 | 1 |
| zooz/ | f491d1f7a865 | socket.io-parser | 3.3.4 | 1 |
| zwavejs/ | 15a6040fb468 | socket.io-parser | 4.2.3 | 1 |
| ghcr.io/ | 140aed2752c3 | socket.io-parser | 4.2.3 | 1 |
| ghcr.io/ | 38a4f32fad82 | socket.io-parser | 3.3.4 | 1 |
| ghcr.io/ | 96683c54ae65 | socket.io-parser | 3.4.3 | 1 |
| ghcr.io/ | 542e91e8499c | socket.io-parser | 3.3.4 | 1 |
| ghcr.io/ | ff2af53897e7 | socket.io-parser | 4.2.3 | 1 |
| quay.io/ | c973e166a5dc | socket.io-parser | 3.3.4 | 1 |