Root has patched CVE-2026-33151 in the socket.io-parser package for Root:npm. Multiple fixed versions available.
{ "severity": "HIGH", "distro": "npm", "source": "Root", "distro_version": "" }
"https://api.root.io/external/osv/ROOT-APP-NPM-CVE-2026-33151.json"
[ "4.2.4-aikido.1", "4.2.4-aikido.2" ]
2.0
"4.2.4"
"aikido.2"
true
[ "4.2.4-root.io.1", "4.2.4-root.io.2" ]
"root.io.2"