Threats tagged 'ghsa-5w7q-77mv-v69f'

A denial of service vulnerability exists in python-socketio versions prior to 5.16.2 where the server accumulates binary EVENT and ACK messages in memory while waiting for their attachments. An attacker can exploit this by sending a binary message and withholding one or more attachments, causing memory to be consumed indefinitely. This issue is addressed in version 5.16.2 by restricting binary packets to authenticated clients and clearing partial messages on client disconnect.