CVE-2022-25867

Publication date

2022-08-02 13:28:24

Family

snyk

State

PUBLISHED

Description

The package io.socket:socket.io-client before 2.0.1 are vulnerable to NULL Pointer Dereference when parsing a packet with with invalid payload format.