Skip to content

socket.io-adapter@2.5.7

Choose a tag to compare

@darrachequesnedarrachequesne released this 20 May 09:35
· 17 commits to main since this release
4faff49

The ws dependency was bumped to ~8.20.1 following CVE-2026-45736.

Note from the ws maintainers:

Although the calculated CVSS severity is medium, the actual severity is believed to be low, as the flaw is only exploitable through misuse that is unlikely in practice.

Bug Fixes

  • do not skip local broadcast when publishAndReturnOffset throws (#5457) (f630158)