CVE-2022-25867

CVE-2022-25867 affects io.socket:socket.io-client (Java) pre-2.0.1. A NULL pointer dereference when parsing a packet with an invalid payload format can lead to denial of service. NVD lists a base score of 7.5 HIGH (NETWORK, low complexity, no user interaction). Public details confirm the issue in...