The package io.socket:socket.io-client before 2.0.1 is vulnerable to NULL Pointer Dereference when parsing a packet with with invalid payload format.
{ "nvd_published_at": "2022-08-02T14:15:00Z", "github_reviewed_at": "2022-08-10T17:41:10Z", "severity": "HIGH", "github_reviewed": true, "cwe_ids": [ "CWE-476" ] }