PyPI/cowrie CVE-2025-34469: high 8.3, EPSS 0.68%

Cowrie has a SSRF vulnerability in wget/curl emulation enabling DDoS amplification

Action: Upgrade cowrie to 2.9.0 or later.

pip install cowrie==2.9.0

Affected

Fixed versions

Sources

• osv: GHSA-83jg-m2pm-4jxj
• https://github.com/cowrie/cowrie/security/advisories/GHSA-83jg-m2pm-4jxj
• https://nvd.nist.gov/vuln/detail/CVE-2025-34469
• https://github.com/cowrie/cowrie/issues/2622
• https://github.com/cowrie/cowrie/pull/2800
• https://github.com/advisories/GHSA-83jg-m2pm-4jxj
• https://github.com/cowrie/cowrie
• https://github.com/cowrie/cowrie/releases/tag/v2.9.0
• https://www.cve.org/cverecord?id=CVE-2025-34469
• https://www.vulncheck.com/advisories/cowrie-unrestricted-wget-curl-emulation-enables-ssrf-based-ddos-amplification

CVE-2025-34469 · published 2025-12-20T17:42:07Z · modified 2026-07-08T07:14:03.064768258Z · JSON