PyPI/mobsf CVE-2025-46730: medium 6.8, EPSS 0.52%
Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 4.3.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-c5vg-26p8-q8cr
- https://github.com/MobSF/Mobile-Security-Framework-MobSF/security/advisories/GHSA-c5vg-26p8-q8cr
- https://nvd.nist.gov/vuln/detail/CVE-2025-46730
- https://github.com/MobSF/Mobile-Security-Framework-MobSF/commit/6987a946485a795f4fd38cebdb4860b368a1995d
- https://github.com/MobSF/Mobile-Security-Framework-MobSF
CVE-2025-46730 · published · modified · JSON