CVE-2025-22868
An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.
- Published Feb 26, 2025
- CVSS 7.5 high
- 0.9% chance of exploitation in the next 30 days (EPSS)
- A fix is available
Affected software
In the news
- Multiple vulnerabilities in VMware products CERT-FR ยท