tag:github.com,2008:https://github.com/socketio/socket.io/releases Release notes from socket.io 2026-03-17T09:53:22Z tag:github.com,2008:Repository/557980/[email protected] 2026-03-18T08:21:21Z socket.io-parser@4.2.6 <p>This release includes a fix for <a href="https://github.com/socketio/socket.io/security/advisories/GHSA-677m-j7p3-52f9">CVE-2026-33151</a>. Please upgrade as soon as possible.</p> <h3>Bug Fixes</h3> <ul> <li>add a limit to the number of binary attachments (<a href="https://github.com/socketio/socket.io/commit/b25738c416c4e32fbff62ee182afa8f6d0dacf78">b25738c</a>)</li> </ul> darrachequesne tag:github.com,2008:Repository/557980/[email protected] 2026-03-18T08:21:08Z socket.io-parser@3.4.4 <p>This release includes a fix for <a href="https://github.com/socketio/socket.io/security/advisories/GHSA-677m-j7p3-52f9">CVE-2026-33151</a>. Please upgrade as soon as possible.</p> <h3>Bug Fixes</h3> <ul> <li>add a limit to the number of binary attachments (<a href="https://github.com/socketio/socket.io/commit/719f9ebab0772ffb882bd614b387e585c1aa75d4">719f9eb</a>)</li> </ul> darrachequesne tag:github.com,2008:Repository/557980/[email protected] 2026-03-18T08:21:34Z socket.io-parser@3.3.5 <p>This release includes a fix for <a href="https://github.com/socketio/socket.io/security/advisories/GHSA-677m-j7p3-52f9">CVE-2026-33151</a>. Please upgrade as soon as possible.</p> <h3>Bug Fixes</h3> <ul> <li>add a limit to the number of binary attachments (<a href="https://github.com/socketio/socket.io/commit/9d39f1f080510f036782f2177fac701cc041faaf">9d39f1f</a>)</li> </ul> darrachequesne tag:github.com,2008:Repository/557980/[email protected] 2026-03-17T15:14:46Z engine.io@6.6.6 <h3>Bug Fixes</h3> <ul> <li>add <code>@types/ws</code> as dependency (<a href="https://github.com/socketio/socket/issues/5458">#5458</a>) (<a href="https://github.com/socketio/socket/commit/07cbe1510ded7e5460cb82e026e2533e50e30eaf">07cbe15</a>)</li> <li><strong>uws</strong>: emit initial_headers and headers events in uServer (<a href="https://github.com/socketio/socket/issues/5460">#5460</a>) (<a href="https://github.com/socketio/socket/commit/44ed73f53995d35ef0c8d10df6806d5687238282">44ed73f</a>)</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/websockets/ws/releases/tag/8.18.3"><code>ws@~8.18.3</code></a> (no change)</li> </ul> darrachequesne tag:github.com,2008:Repository/557980/[email protected] 2025-12-23T12:33:01Z socket.io-parser@4.2.5 <p>This release contains a bump of <code>debug</code> from <code>~4.3.1</code> to <code>~4.4.1</code>.</p> darrachequesne tag:github.com,2008:Repository/557980/[email protected] 2026-03-18T08:24:28Z socket.io-client@4.8.3 <p>There were some minor bug fixes on the server side, which mandate a client bump.</p> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/socketio/engine.io-client/releases/tag/6.5.2"><code>engine.io-client@~6.6.1</code></a> (no change)</li> <li><a href="https://github.com/websockets/ws/releases/tag/8.18.3"><code>ws@~8.18.3</code></a> (<a href="https://github.com/websockets/ws/compare/8.17.1...8.18.3">diff</a>)</li> </ul> darrachequesne tag:github.com,2008:Repository/557980/[email protected] 2025-12-23T12:33:33Z socket.io-adapter@2.5.6 <p>This release contains a bump of:</p> <ul> <li><code>ws</code> from <code>~8.17.1</code> to <code>~8.18.3</code></li> <li><code>debug</code> from <code>~4.3.1</code> to <code>~4.4.1</code></li> </ul> darrachequesne tag:github.com,2008:Repository/557980/[email protected] 2026-03-18T08:25:02Z socket.io@4.8.3 <h3>Bug Fixes</h3> <ul> <li>do not throw when calling io.close() on a stopped server (<a href="https://github.com/socketio/socket.io/commit/9581f9bcfd0c0fa8cb16eae1604c6a727af21efa">9581f9b</a>)</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/socketio/engine.io/releases/tag/6.6.0"><code>engine.io@~6.6.0</code></a> (no change)</li> <li><a href="https://github.com/websockets/ws/releases/tag/8.18.3"><code>ws@~8.18.3</code></a> (no change)</li> </ul> darrachequesne tag:github.com,2008:Repository/557980/[email protected] 2025-12-23T12:32:26Z engine.io-client@6.6.4 <p>This release contains a bump of:</p> <ul> <li><code>ws</code> from <code>~8.17.1</code> to <code>~8.18.3</code></li> <li><code>debug</code> from <code>~4.3.1</code> to <code>~4.4.1</code></li> </ul> <h3>Bug Fixes</h3> <ul> <li>properly handle port option (<a href="https://github.com/socketio/socket.io/issues/5241" data-hovercard-type="pull_request" data-hovercard-url="/socketio/socket.io/pull/5241/hovercard">#5241</a>) (<a href="https://github.com/socketio/socket.io/commit/1da9cddeab0bf5ce41890d156d73af8194cef656">1da9cdd</a>)</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/websockets/ws/releases/tag/8.18.3"><code>ws@~8.18.3</code></a> (<a href="https://github.com/websockets/ws/compare/8.17.1...8.18.3">diff</a>)</li> </ul> darrachequesne tag:github.com,2008:Repository/557980/[email protected] 2025-12-22T16:00:33Z socket.io-client@4.8.2 <h3>Bug Fixes</h3> <ul> <li><strong>bundle</strong>: do not mangle the "_placeholder" attribute (bis) (<a href="https://github.com/socketio/socket.io/commit/cdae01983a8ae840fc9812875a8b88166b377c11">cdae019</a>)</li> <li>drain queue before emitting "connect" (<a href="https://github.com/socketio/socket.io/issues/5259" data-hovercard-type="pull_request" data-hovercard-url="/socketio/socket.io/pull/5259/hovercard">#5259</a>) (<a href="https://github.com/socketio/socket.io/commit/d19928e8d8b325310274031ed7de2ddc93ebb589">d19928e</a>)</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/socketio/engine.io-client/releases/tag/6.6.1"><code>engine.io-client@~6.6.1</code></a> (no change)</li> <li><a href="https://github.com/websockets/ws/releases/tag/8.17.1"><code>ws@~8.17.1</code></a> (no change)</li> </ul> darrachequesne