com.wilddog.client:wilddog-sync-android (>=2.0.1, <=2.0.4), com.wilddog.client:wilddog-video-android (>=0.5.2, <=0.5.4) +1 more potentially affected by CVE-2022-25867 via io.socket:socket.io-client (0.6.3)

io.socket:socket.io-client MAVEN version 0.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.socket:socket.io-client and may be impacted: - com.wilddog.client:wilddog-sync-android =2.0.1, =0.5.2, =0.6.6, =0.6.7 Source cves: CVE-2022-25867 Source...

com.barchart:barchart-streaming-client (>=0.2.0, <=0.2.1), com.weaverplatform:import-xmi (>=1.0.1, <=1.2.0) +6 more potentially affected by CVE-2022-25867 via io.socket:socket.io-client (0.7.0)

io.socket:socket.io-client MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.socket:socket.io-client and may be impacted: - com.barchart:barchart-streaming-client =0.2.0, =1.0.1, =1.1.0, =1.0.63, =1.0, =1.0, =1.1.8 -...

com.bringg:ordertrack (>=1.1.5, <=1.1.15), com.wilddog.client:wilddog-auth-android (>=2.0.5, <=2.0.6) +6 more potentially affected by CVE-2022-25867 via io.socket:socket.io-client (0.8.2)

io.socket:socket.io-client MAVEN version 0.8.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.socket:socket.io-client and may be impacted: - com.bringg:ordertrack =1.1.5, =2.0.5, =2.0.5, =0.5.5, =1.0.1-beta -...

com.bringg:ordertrack (>=1.1.16, <=1.2.1), com.seebo:seebo-android-sdk (>=2.1.0, <=3.1.1) +10 more potentially affected by CVE-2022-25867 via io.socket:socket.io-client (0.8.3)

io.socket:socket.io-client MAVEN version 0.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.socket:socket.io-client and may be impacted: - com.bringg:ordertrack =1.1.16, =2.1.0, =beta-20170505, =2.3.1, =1.0.2-beta, =1.0.127, =0.1, =1.0.0, =1.0.0,...

cloud.metaapi.sdk:metaapi-java-sdk (>=13.2.1, <=14.0.3), com.tfowl.cosmobuzz:cosmobuzz-client-kotlin (1.0.0) +4 more potentially affected by CVE-2022-25867 via io.socket:socket.io-client (1.0.1)

io.socket:socket.io-client MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.socket:socket.io-client and may be impacted: - cloud.metaapi.sdk:metaapi-java-sdk =13.2.1, =1.0.0, =0.3.0, =1.6.0, =1.16.1 Source cves: CVE-2022-25867...

cloud.metaapi.sdk:metaapi-java-sdk (>=14.0.4, <=14.0.9), com.github.vhall.android.base:message-client (>=1.5.0, <=1.6.2) +7 more potentially affected by CVE-2022-25867 via io.socket:socket.io-client (1.0.2)

io.socket:socket.io-client MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.socket:socket.io-client and may be impacted: - cloud.metaapi.sdk:metaapi-java-sdk =14.0.4, =1.5.0, =2.5.1, =2.7.7, =0.1.0, =0.1.2, =0.1.7 Source cves:...

com.wedeploy:com.wedeploy.api-java.api-client (>=beta-20170331, <=1.0.1), com.wilddog:wilddog-client-jvm (>=0.5.0, <=0.6.4) +4 more potentially affected by CVE-2022-25867 via io.socket:socket.io-client (0.6.1)

io.socket:socket.io-client MAVEN version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on io.socket:socket.io-client and may be impacted: - com.wedeploy:com.wedeploy.api-java.api-client =beta-20170331, =0.5.0, =1.0.46, =1.0.32, =1.0.1, =1.0.7 Sour...

cloud.metaapi.sdk:metaapi-java-sdk (>=7.1.0, <=13.2.0), com.after_sunrise.cryptocurrency:bitflyer4j (>=0.5.0, <=0.6.0) +42 more potentially affected by CVE-2022-25867 via io.socket:socket.io-client (1.0.0)

io.socket:socket.io-client MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.socket:socket.io-client and may be impacted: - cloud.metaapi.sdk:metaapi-java-sdk =7.1.0, =0.5.0, =1.0.4, =1.0.4, =1.2.1, =2.3.3, =1.0.1, =0.1.6, =0.3.0,...

io.github.comet-crypto:lib (>=0.2, <=0.2.3), io.socket:socket.io-server (>=3.0.0, <=3.0.1) potentially affected by CVE-2022-25867 via io.socket:socket.io-client (2.0.0)

io.socket:socket.io-client MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.socket:socket.io-client and may be impacted: - io.github.comet-crypto:lib =0.2, =3.0.0, =3.0.1 Source cves: CVE-2022-25867 Source advisory:...

io.github.comet-crypto:lib (>=0.2, <=0.2.3), io.socket:socket.io-server (>=3.0.0, <=3.0.1) potentially affected by CVE-2022-25867 via io.socket:socket.io-client (2.0.0)

io.socket:socket.io-client MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on io.socket:socket.io-client and may be impacted: - io.github.comet-crypto:lib =0.2, =3.0.0, =3.0.1 Source cves: CVE-2022-25867 Source advisory:...

CVE-2022-25867

The package io.socket:socket.io-client before 2.0.1 are vulnerable to NULL Pointer Dereference when parsing a packet with with invalid payload format...

cloud.metaapi.sdk:metaapi-java-sdk (>=7.1.0, <=14.0.9), com.after_sunrise.cryptocurrency:bitflyer4j (>=0.5.0, <=0.6.0) +72 more potentially affected by CVE-2022-25867 via io.socket:socket.io-client (>=0.6.1, <=2.0.0)

io.socket:socket.io-client MAVEN version =0.6.1, =7.1.0, =0.5.0, =0.2.0, =1.1.5, =1.0.4, =1.0.4, =1.2.1, =2.3.3, =2.7.7, =1.0.1, =2.1.0, =3.1.1 and more Source cves: CVE-2022-25867 Source advisory: MEND:CVE-2022-25867...

CVE-2022-25867: NULL Pointer Dereference

The package io.socket:socket.io-client before 2.0.1 are vulnerable to NULL Pointer Dereference when parsing a packet with with invalid payload format...