CVE-2020-7693: Sockjs Project Sockjs

Medium severity, CVSS 5.3. EPSS: 5% chance of exploitation in the next 30 days.

Incorrect handling of Upgrade header with the value websocket leads in crashing of containers hosting sockjs apps. This affects the package sockjs before 0.3.20.

Affected products

• Sockjs Project Sockjs: before 0.3.20 (fixed in 0.3.20)

Published 2020-07-09. Last modified 2026-06-17.