tag:github.com,2008:https://github.com/socketio/socket.io/releasesRelease notes from socket.io2026-03-17T09:53:22Ztag:github.com,2008:Repository/557980/[email protected]2026-03-18T08:21:21Zsocket.io-parser@4.2.6<p>This release includes a fix for <a href="https://github.com/socketio/socket.io/security/advisories/GHSA-677m-j7p3-52f9">CVE-2026-33151</a>. Please upgrade as soon as possible.</p>
<h3>Bug Fixes</h3>
<ul>
<li>add a limit to the number of binary attachments (<a href="https://github.com/socketio/socket.io/commit/b25738c416c4e32fbff62ee182afa8f6d0dacf78">b25738c</a>)</li>
</ul>darrachequesnetag:github.com,2008:Repository/557980/[email protected]2026-03-18T08:21:08Zsocket.io-parser@3.4.4<p>This release includes a fix for <a href="https://github.com/socketio/socket.io/security/advisories/GHSA-677m-j7p3-52f9">CVE-2026-33151</a>. Please upgrade as soon as possible.</p>
<h3>Bug Fixes</h3>
<ul>
<li>add a limit to the number of binary attachments (<a href="https://github.com/socketio/socket.io/commit/719f9ebab0772ffb882bd614b387e585c1aa75d4">719f9eb</a>)</li>
</ul>darrachequesnetag:github.com,2008:Repository/557980/[email protected]2026-03-18T08:21:34Zsocket.io-parser@3.3.5<p>This release includes a fix for <a href="https://github.com/socketio/socket.io/security/advisories/GHSA-677m-j7p3-52f9">CVE-2026-33151</a>. Please upgrade as soon as possible.</p>
<h3>Bug Fixes</h3>
<ul>
<li>add a limit to the number of binary attachments (<a href="https://github.com/socketio/socket.io/commit/9d39f1f080510f036782f2177fac701cc041faaf">9d39f1f</a>)</li>
</ul>darrachequesnetag:github.com,2008:Repository/557980/[email protected]2026-03-17T15:14:46Zengine.io@6.6.6<h3>Bug Fixes</h3>
<ul>
<li>add <code>@types/ws</code> as dependency (<a href="https://github.com/socketio/socket/issues/5458">#5458</a>) (<a href="https://github.com/socketio/socket/commit/07cbe1510ded7e5460cb82e026e2533e50e30eaf">07cbe15</a>)</li>
<li><strong>uws</strong>: emit initial_headers and headers events in uServer (<a href="https://github.com/socketio/socket/issues/5460">#5460</a>) (<a href="https://github.com/socketio/socket/commit/44ed73f53995d35ef0c8d10df6806d5687238282">44ed73f</a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href="https://github.com/websockets/ws/releases/tag/8.18.3"><code>ws@~8.18.3</code></a> (no change)</li>
</ul>darrachequesnetag:github.com,2008:Repository/557980/[email protected]2025-12-23T12:33:01Zsocket.io-parser@4.2.5<p>This release contains a bump of <code>debug</code> from <code>~4.3.1</code> to <code>~4.4.1</code>.</p>darrachequesnetag:github.com,2008:Repository/557980/[email protected]2026-03-18T08:24:28Zsocket.io-client@4.8.3<p>There were some minor bug fixes on the server side, which mandate a client bump.</p>
<h3>Dependencies</h3>
<ul>
<li><a href="https://github.com/socketio/engine.io-client/releases/tag/6.5.2"><code>engine.io-client@~6.6.1</code></a> (no change)</li>
<li><a href="https://github.com/websockets/ws/releases/tag/8.18.3"><code>ws@~8.18.3</code></a> (<a href="https://github.com/websockets/ws/compare/8.17.1...8.18.3">diff</a>)</li>
</ul>darrachequesnetag:github.com,2008:Repository/557980/[email protected]2025-12-23T12:33:33Zsocket.io-adapter@2.5.6<p>This release contains a bump of:</p>
<ul>
<li><code>ws</code> from <code>~8.17.1</code> to <code>~8.18.3</code></li>
<li><code>debug</code> from <code>~4.3.1</code> to <code>~4.4.1</code></li>
</ul>darrachequesnetag:github.com,2008:Repository/557980/[email protected]2026-03-18T08:25:02Zsocket.io@4.8.3<h3>Bug Fixes</h3>
<ul>
<li>do not throw when calling io.close() on a stopped server (<a href="https://github.com/socketio/socket.io/commit/9581f9bcfd0c0fa8cb16eae1604c6a727af21efa">9581f9b</a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href="https://github.com/socketio/engine.io/releases/tag/6.6.0"><code>engine.io@~6.6.0</code></a> (no change)</li>
<li><a href="https://github.com/websockets/ws/releases/tag/8.18.3"><code>ws@~8.18.3</code></a> (no change)</li>
</ul>darrachequesnetag:github.com,2008:Repository/557980/[email protected]2025-12-23T12:32:26Zengine.io-client@6.6.4<p>This release contains a bump of:</p>
<ul>
<li><code>ws</code> from <code>~8.17.1</code> to <code>~8.18.3</code></li>
<li><code>debug</code> from <code>~4.3.1</code> to <code>~4.4.1</code></li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>properly handle port option (<a href="https://github.com/socketio/socket.io/issues/5241" data-hovercard-type="pull_request" data-hovercard-url="/socketio/socket.io/pull/5241/hovercard">#5241</a>) (<a href="https://github.com/socketio/socket.io/commit/1da9cddeab0bf5ce41890d156d73af8194cef656">1da9cdd</a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href="https://github.com/websockets/ws/releases/tag/8.18.3"><code>ws@~8.18.3</code></a> (<a href="https://github.com/websockets/ws/compare/8.17.1...8.18.3">diff</a>)</li>
</ul>darrachequesnetag:github.com,2008:Repository/557980/[email protected]2025-12-22T16:00:33Zsocket.io-client@4.8.2<h3>Bug Fixes</h3>
<ul>
<li><strong>bundle</strong>: do not mangle the "_placeholder" attribute (bis) (<a href="https://github.com/socketio/socket.io/commit/cdae01983a8ae840fc9812875a8b88166b377c11">cdae019</a>)</li>
<li>drain queue before emitting "connect" (<a href="https://github.com/socketio/socket.io/issues/5259" data-hovercard-type="pull_request" data-hovercard-url="/socketio/socket.io/pull/5259/hovercard">#5259</a>) (<a href="https://github.com/socketio/socket.io/commit/d19928e8d8b325310274031ed7de2ddc93ebb589">d19928e</a>)</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li><a href="https://github.com/socketio/engine.io-client/releases/tag/6.6.1"><code>engine.io-client@~6.6.1</code></a> (no change)</li>
<li><a href="https://github.com/websockets/ws/releases/tag/8.17.1"><code>ws@~8.17.1</code></a> (no change)</li>
</ul>darrachequesne