CLSA-2026-1793304087: TuxCare security update for socket.io (2 CVEs)
Published Oct 29, 2026
·Updated
TuxCare rebuilt socket.io to address 2 CVEs. Fixed in 1.7.3-tuxcare.1.
Affected Software
1 affected componentFixes available
tuxcare/socket.io>=1.7.3-tuxcare.0<1.7.3-tuxcare.1
1.7.3-tuxcare.1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
tuxcare/socket.ioto a version that resolves this vulnerability.Fixed in 1.7.3-tuxcare.1 - Upgrade
Upgrade
socket.ioto a version that resolves this vulnerability.Fixed in 1.7.3-tuxcare.1
Event History
Oct 29, 2026
Advisory Published
via OSV·09:01 PM
Data Sourced
via OSV·09:01 PM
DescriptionAffected Software
Frequently Asked Questions
1
Which package build contains the fixes?
The fixes are available in socket.io version 1.7.3-tuxcare.1.
2
How many CVEs does this update address?
TuxCare rebuilt socket.io to address two CVEs.