Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-25867
Description
The package io.socket:socket.io-client before 2.0.1 are vulnerable to NULL Pointer Dereference when parsing a packet with with invalid payload format.
socketio/socket.io-client-java
GitHubFull-featured Socket.IO Client Library for Java, which is compatible with Socket.IO v1.0 and later.
GitHubFull-featured Socket.IO Client Library for Java, which is compatible with Socket.IO v1.0 and later.< 2.0.1NVD