[GHSA] GHSA-2m8v-j782-fhvr (high) — Socket.IO: Zero-attachment Memory Exhaustion

GHSA-2m8v-j782-fhvr Severity: high CVE: CVE-2026-69185

Socket.IO: Zero-attachment Memory Exhaustion

### Impact

A specially crafted Socket.IO packet can make the server wait for a large number of binary attachments and buffer them, which can be exploited to make the server run out of memory.

### Patches

| Version range | Used by | Fixed version | |--------