Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-21660 State: PUBLISHED Published: 2022-02-09T19:55:09.000Z Last Updated: 2025-04-22T18:22:21.231Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: flipped-aurora Products: gin-vue-admin Problem Types: CWE-862 Description: Gin-vue-admin is a backstage management system based on vue and gin. In versions prior to 2.4.7 low privilege users are able to modify higher privilege users. Authentication is missing on the `setUserInfo` function. Users are advised to update as soon as possible. There are no known workarounds. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/flipped-aurora/gin-vue-a
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/flipped-aurora/gin-vue-admin/security/advisories/GHSA-xxvh-9c87-pqjx
CVE ID: CVE-2022-21661 State: PUBLISHED Published: 2022-01-06T22:50:11 Last Updated: 2024-09-09T14:13:15.875Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: WordPress Products: wordpress-develop Problem Types: CWE-89 Description: WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to improper sanitization in WP_Query, there can be cases where SQL injection is possible through plugins or themes that use it in a certain way. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto
ffected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-6676-cqfm-gw84 - https://github.com/WordPress/wordpress-develop/commit/17efac8c8ec64555eff5cf51a3eff81e06317214 - https://wordpress.org/news/2022/01/wordpress-5-8-3-security-release/ - https://www.zerodayinitiative.com/advisories/ZDI-22-020/ - https://www.debian.org/security/2022/dsa-5039 - https://www.exploit-db.com/exploits/50663 - http://pa
ries/ZDI-22-020/ - https://www.debian.org/security/2022/dsa-5039 - https://www.exploit-db.com/exploits/50663 - http://packetstormsecurity.com/files/165540/WordPress-Core-5.8.2-SQL-Injection.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DM6XPH3JN6V4NF4WBOJTOXZIVE6VKKE3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4UNEC63UU5GEU47IIR4RMTZAHNEOJG/ - https://lists.debian.org/debian-lts-announce/2022/01/msg00019.html
CVE ID: CVE-2022-21662 State: PUBLISHED Published: 2022-01-06T23:05:10.000Z Last Updated: 2025-04-23T19:14:24.190Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: WordPress Products: wordpress-develop Problem Types: CWE-79 Description: WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Low-privileged authenticated users (like author) in WordPress core are able to execute JavaScript/perform stored XSS attack, which can affect high-privileged users. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recomme
ersion 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/news/2022/01/wordpress-5-8-3-security-release/ - https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-699q-3hj9-889w - https://www.debian.org/security/2022/dsa-5039 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DM6XPH3JN6V4NF4WBOJTOXZIVE6VKKE3/ - https://lists.fedoraproject.org/archives/list/package-announce%
aproject.org/message/DM6XPH3JN6V4NF4WBOJTOXZIVE6VKKE3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4UNEC63UU5GEU47IIR4RMTZAHNEOJG/ - https://lists.debian.org/debian-lts-announce/2022/01/msg00019.html
CVE ID: CVE-2022-21663 State: PUBLISHED Published: 2022-01-06T23:00:11.000Z Last Updated: 2025-04-22T18:33:55.718Z Severity: MEDIUM (CVSS 6.6 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: WordPress Products: wordpress-develop Problem Types: CWE-74 Description: WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. On a multisite, users with Super Admin role can bypass explicit/additional hardening under certain conditions through object injection. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-upd
ted versions are also fixed via security release, that go back till 3.7.37. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/news/2022/01/wordpress-5-8-3-security-release/ - https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-jmmq-m8p8-332h - https://www.debian.org/security/2022/dsa-5039 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DM6XPH3JN6V4NF4WBOJTOXZIVE6VKKE3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org
PH3JN6V4NF4WBOJTOXZIVE6VKKE3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4UNEC63UU5GEU47IIR4RMTZAHNEOJG/ - https://lists.debian.org/debian-lts-announce/2022/01/msg00019.html - https://blog.sonarsource.com/wordpress-object-injection-vulnerability/
CVE ID: CVE-2022-21664 State: PUBLISHED Published: 2022-01-06T22:55:09.000Z Last Updated: 2025-04-23T19:14:29.628Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L) Vendors: WordPress Products: wordpress-develop Problem Types: CWE-89 Description: WordPress is a free and open-source content management system written in PHP and paired with a MariaDB database. Due to lack of proper sanitization in one of the classes, there's potential for unintended SQL queries to be executed. This has been patched in WordPress version 5.8.3. Older affected versions are also fixed via security release, that go back till 4.1.34. We strongly recommend that you keep auto-updates enabled. There
so fixed via security release, that go back till 4.1.34. We strongly recommend that you keep auto-updates enabled. There are no known workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wordpress.org/news/2022/01/wordpress-5-8-3-security-release/ - https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-jp3p-gw8h-6x86 - https://github.com/WordPress/wordpress-develop/commit/c09ccfbc547d75b392dbccc1ef0b4442ccd3c957 - https://www.debian.org/security/2022/dsa-5039 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DM6XPH3JN6V4NF4WBOJTOXZIVE6VKKE3/ - https://li
ject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DM6XPH3JN6V4NF4WBOJTOXZIVE6VKKE3/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4UNEC63UU5GEU47IIR4RMTZAHNEOJG/ - https://lists.debian.org/debian-lts-announce/2022/01/msg00019.html
CVE ID: CVE-2022-21666 State: PUBLISHED Published: 2022-01-10T20:00:12.000Z Last Updated: 2025-04-23T19:13:57.602Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Aaron-Junker Products: USOC Problem Types: CWE-89 Description: Useful Simple Open-Source CMS (USOC) is a content management system (CMS) for programmers. Versions prior to Pb2.4Bfx3 allowed Sql injection in usersearch.php only for users with administrative privileges. Users should replace the file `admin/pages/useredit.php` with a newer version. USOC version Pb2.4Bfx3 contains a fixed version of `admin/pages/useredit.php`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
ed version of `admin/pages/useredit.php`. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Aaron-Junker/USOC/security/advisories/GHSA-557p-hhpc-4wrx - https://github.com/Aaron-Junker/USOC/commit/c331d26aaab41a7e9e8c1c1a990132dca9d01e10 - https://github.com/Aaron-Junker/USOC/releases/tag/Pb2.4Bfx3
CVE ID: CVE-2022-21667 State: PUBLISHED Published: 2022-01-07T17:10:11.000Z Last Updated: 2025-04-23T19:14:18.314Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: soketi Products: soketi Problem Types: CWE-755 Description: soketi is an open-source WebSockets server. There is an unhandled case when reading POST requests which results in the server crashing if it could not read the body of a request. In the event that a POST request is sent to any endpoint of the server with an empty body, even unauthenticated with the Pusher Protocol, it will crash the server. All users that run the server are affected by this vulnerability and it's highly recommended to upgrad
crash the server. All users that run the server are affected by this vulnerability and it's highly recommended to upgrade to the latest patch. There are no workarounds for this issue. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/soketi/soketi/security/advisories/GHSA-86ch-6w7v-v6xf - https://github.com/soketi/soketi/commit/4b12efef9c31117c36a0a0f1c3aa32114e86364b - https://github.com/soketi/soketi/releases/tag/0.24.1
CVE ID: CVE-2022-21668 State: PUBLISHED Published: 2022-01-10T20:20:16 Last Updated: 2024-08-03T02:46:39.543Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: pypa Products: pipenv Problem Types: CWE-20, CWE-77, CWE-78, CWE-427, CWE-791 Description: pipenv is a Python development workflow tool. Starting with version 2018.10.9 and prior to version 2022.1.8, a flaw in pipenv's parsing of requirements files allows an attacker to insert a specially crafted string inside a comment anywhere within a requirements.txt file, which will cause victims who use pipenv to install the requirements file to download dependencies from a package index server controlled by the attac
use pipenv to install the requirements file to download dependencies from a package index server controlled by the attacker. By embedding malicious code in packages served from their malicious index server, the attacker can trigger arbitrary remote code execution (RCE) on the victims' systems. If an attacker is able to hide a malicious `--index-url` option in a requirements file that a victim installs with pipenv, the attacker can embed arbitrary malicious code in packages served from their malicious index server that will be executed on the victim's host during installation (remote code execution/RCE). When pip installs from a source distribution, any code in the setup.py is executed by the
n (remote code execution/RCE). When pip installs from a source distribution, any code in the setup.py is executed by the install process. This issue is patched in version 2022.1.8. The GitHub Security Advisory contains more information about this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pypa/pipenv/security/advisories/GHSA-qc9x-gjcv-465w - https://github.com/pypa/pipenv/commit/439782a8ae36c4762c88e43d5f0d8e563371b46f - https://github.com/pypa/pipenv/releases/tag/v2022.1.8 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/QHQRIWKDP3SVJABAPEXBIQPKDI6UP7G4/ - https://lists.fedoraproject.or
st/package-announce%40lists.fedoraproject.org/message/QHQRIWKDP3SVJABAPEXBIQPKDI6UP7G4/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/KCROBYHUS6DKQPCXBRPCZ5CDBNQTYAWT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/56HBA3EOSLEDNCCBJVHE6DO34P56EOUM/
CVE ID: CVE-2022-21669 State: PUBLISHED Published: 2022-01-11T00:00:00.000Z Last Updated: 2025-04-23T19:13:44.908Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) Vendors: PuddingBot Products: pudding-bot Problem Types: CWE-798 Description: PuddingBot is a group management bot. In version 0.0.6-b933652 and prior, the bot token is publicly exposed in main.py, making it accessible to malicious actors. The bot token has been revoked and new version is already running on the server. As of time of publication, the maintainers are planning to update code to reflect this change at a later date. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: Re
e to reflect this change at a later date. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/PuddingBot/pudding-bot/security/advisories/GHSA-cxgr-xpmj-9qjm - https://github.com/PuddingBot/pudding-bot/commit/a5b15fb0a5be5fdbacba8ff7b2c8759d5e3ba20f
CVE ID: CVE-2022-21670 State: PUBLISHED Published: 2022-01-10T20:40:10.000Z Last Updated: 2025-04-22T18:33:46.200Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: markdown-it Products: markdown-it Problem Types: CWE-400 Description: markdown-it is a Markdown parser. Prior to version 1.3.2, special patterns with length greater than 50 thousand characterss could slow down the parser significantly. Users should upgrade to version 12.3.2 to receive a patch. There are no known workarounds aside from upgrading. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/markdown-it/markdown-it/security/advisories/GH
gram Container: - CISA ADP Vulnrichment: References: - https://github.com/markdown-it/markdown-it/security/advisories/GHSA-6vfc-qv3f-vr6c - https://github.com/markdown-it/markdown-it/commit/ffc49ab46b5b751cd2be0aabb146f2ef84986101
CVE ID: CVE-2022-21671 State: PUBLISHED Published: 2022-01-11T15:05:11.000Z Last Updated: 2025-04-23T19:13:35.823Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: replit Products: crosis Problem Types: CWE-200 Description: @replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of sensitive information exists in versions prior to 7.3.1. When using this library as a way to programmatically communicate with Replit in a standalone fashion, if there are multiple failed attempts to contact Replit through a WebSocket, the library will attempt to communicate using a fallback poll-based proxy. The URL of th
act Replit through a WebSocket, the library will attempt to communicate using a fallback poll-based proxy. The URL of the proxy has changed, so any communication done to the previous URL could potentially reach a server that is outside of Replit's control and the token used to connect to the Repl could be obtained by an attacker, leading to full compromise of that Repl (not of the account). This was patched in version 7.3.1 by updating the address of the fallback WebSocket polling proxy to the new one. As a workaround, a user may specify the new address for the polling host (`gp-v2.replit.com`) in the `ConnectArgs`. More information about this workaround is available in the GitHub Security A
(`gp-v2.replit.com`) in the `ConnectArgs`. More information about this workaround is available in the GitHub Security Advisory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/replit/crosis/security/advisories/GHSA-7w54-gp8x-f33m - https://github.com/replit/crosis/commit/e44b6a8f5fa28cb2872e3c19bb8a205bb5bfc281
CVE ID: CVE-2022-21672 State: PUBLISHED Published: 2022-01-10T21:00:13.000Z Last Updated: 2025-04-23T19:13:51.833Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N) Vendors: lfs-book Products: make-ca Problem Types: CWE-115 Description: make-ca is a utility to deliver and manage a complete PKI configuration for workstations and servers. Starting with version 0.9 and prior to version 1.10, make-ca misinterprets Mozilla certdata.txt and treats explicitly untrusted certificates like trusted ones, causing those explicitly untrusted certificates trusted by the system. The explicitly untrusted certificates were used by some CAs already hacked. Hostile attackers may perform a
the system. The explicitly untrusted certificates were used by some CAs already hacked. Hostile attackers may perform a MIM attack exploiting them. Everyone using the affected versions of make-ca should upgrade to make-ca-1.10, and run `make-ca -f -g` as the `root` user to regenerate the trusted store immediately. As a workaround, users may delete the untrusted certificates from /etc/pki/tls and /etc/ssl/certs manually (or by a script), but this is not recommended because the manual changes will be overwritten next time running make-ca to update the trusted anchor. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lfs-book/make-ca/s
nal Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/lfs-book/make-ca/security/advisories/GHSA-m5qh-728v-4xrx - https://github.com/lfs-book/make-ca/issues/19 - https://github.com/lfs-book/make-ca/pull/20 - https://lists.linuxfromscratch.org/sympa/arc/blfs-support/2022-01/msg00020.html
CVE ID: CVE-2022-21673 State: PUBLISHED Published: 2022-01-18T21:35:10.000Z Last Updated: 2025-04-23T19:11:00.141Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: grafana Products: grafana Problem Types: CWE-200 Description: Grafana is an open-source platform for monitoring and observability. In affected versions when a data source has the Forward OAuth Identity feature enabled, sending a query to that datasource with an API token (and no other user credentials) will forward the OAuth Identity of the most recently logged-in user. This can allow API token holders to retrieve data for which they may not have intended access. This attack relies on the Grafana i
llow API token holders to retrieve data for which they may not have intended access. This attack relies on the Grafana instance having data sources that support the Forward OAuth Identity feature, the Grafana instance having a data source with the Forward OAuth Identity feature toggled on, the Grafana instance having OAuth enabled, and the Grafana instance having usable API keys. This issue has been patched in versions 7.5.13 and 8.3.4. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/grafana/grafana/security/advisories/GHSA-8wjh-59cw-9xh4 - https://github.com/grafana/grafana/releases/tag/v7.5.13 - https://github.com/grafana/grafana
ories/GHSA-8wjh-59cw-9xh4 - https://github.com/grafana/grafana/releases/tag/v7.5.13 - https://github.com/grafana/grafana/releases/tag/v8.3.4 - https://security.netapp.com/advisory/ntap-20220303-0004/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HLAQRRGNSO5MYCPAXGPH2OCSHOGHSQMQ/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2PFW6Q2LXXWTFRTMTRN4ZGADFRQPKJ3D/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/36GUEPA5TPSC57DZTPYPBL6T7UPQ2FRH/
CVE ID: CVE-2022-21675 State: PUBLISHED Published: 2022-01-12T18:20:11.000Z Last Updated: 2025-04-23T19:13:22.023Z Severity: CRITICAL (CVSS 9.9 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:H) Vendors: Konloch Products: bytecode-viewer Problem Types: CWE-22 Description: Bytecode Viewer (BCV) is a Java/Android reverse engineering suite. Versions of the package prior to 2.11.0 are vulnerable to Arbitrary File Write via Archive Extraction (AKA "Zip Slip"). The vulnerability is exploited using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe). The Zip Slip vulnerability can affect numerous archive formats, including zip, jar, tar, war, cpio, apk, rar and 7z.
e). The Zip Slip vulnerability can affect numerous archive formats, including zip, jar, tar, war, cpio, apk, rar and 7z. The attacker can then overwrite executable files and either invoke them remotely or wait for the system or user to call them, thus achieving remote command execution on the victim’s machine. The impact of a Zip Slip vulnerability would allow an attacker to create or overwrite existing files on the filesystem. In the context of a web application, a web shell could be placed within the application directory to achieve code execution. All users should upgrade to BCV v2.11.0 when possible to receive a patch. There are no recommended workarounds aside from upgrading. Additional
e to BCV v2.11.0 when possible to receive a patch. There are no recommended workarounds aside from upgrading. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Konloch/bytecode-viewer/security/advisories/GHSA-3wq9-j4fc-4wmc - https://github.com/Konloch/bytecode-viewer/commit/1ec02658fe6858162f5e6a24f97928de6696c5cb - https://github.com/Konloch/bytecode-viewer/commit/c968e94b2c93da434a4ecfac6d08eda162d615d0 - https://github.com/Konloch/bytecode-viewer/releases/tag/v2.11.0
CVE ID: CVE-2022-21676 State: PUBLISHED Published: 2022-01-12T18:25:15.000Z Last Updated: 2025-04-23T19:13:15.800Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: socketio Products: engine.io Problem Types: CWE-754 Description: Engine.IO is the implementation of transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. A specially crafted HTTP request can trigger an uncaught exception on the Engine.IO server, thus killing the Node.js process. This impacts all the users of the `engine.io` package starting from version `4.0.0`, including those who uses depending packages like `socket.io`. Versions prior to `4.0.0` are not impac
m version `4.0.0`, including those who uses depending packages like `socket.io`. Versions prior to `4.0.0` are not impacted. A fix has been released for each major branch, namely `4.1.2` for the `4.x.x` branch, `5.2.1` for the `5.x.x` branch, and `6.1.1` for the `6.x.x` branch. There is no known workaround except upgrading to a safe version. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/socketio/engine.io/security/advisories/GHSA-273r-mgr4-v34f - https://github.com/socketio/engine.io/commit/66f889fc1d966bf5bfa0de1939069153643874ab - https://github.com/socketio/engine.io/commit/a70800d7e96da32f6e6622804ef659ebc58659db - https://gi
e1939069153643874ab - https://github.com/socketio/engine.io/commit/a70800d7e96da32f6e6622804ef659ebc58659db - https://github.com/socketio/engine.io/commit/c0e194d44933bd83bf9a4b126fca68ba7bf5098c - https://github.com/socketio/engine.io/releases/tag/4.1.2 - https://github.com/socketio/engine.io/releases/tag/5.2.1 - https://github.com/socketio/engine.io/releases/tag/6.1.1 - https://security.netapp.com/advisory/ntap-20220209-0002/