AIKIDO-2025-10662

TL;DR

Affected versions of this package contain a vulnerability known as a heap-use-after-free issue in the PsyncIoEngine. It arises from improper buffer handling during the cancellation of tasks in I/O operations, which can lead to memory corruption. An attacker could exploit this vulnerability by strategically canceling tasks to trigger the use-after-free condition, potentially resulting in arbitrary code execution or a denial of service.