PyPI/asyncua CVE-2022-25304: high 7.5, EPSS 1.58%
Uncontrolled Resource Consumption in asyncua and opcua
Action: Upgrade asyncua to 0.9.96 or later.
pip install asyncua==0.9.96Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.96 | - |
Fixed versions
| 0.9.96 |
Sources
- osv: GHSA-mfpj-3qhm-976m
- https://nvd.nist.gov/vuln/detail/CVE-2022-25304
- https://github.com/FreeOpcUa/python-opcua/issues/1466
- https://github.com/FreeOpcUa/opcua-asyncio/commit/01c7acf047887b62d979cd4373d370e72a4b9057
- https://github.com/FreeOpcUa/opcua-asyncio
- https://security.snyk.io/vuln/SNYK-PYTHON-ASYNCUA-2988731
- https://security.snyk.io/vuln/SNYK-PYTHON-OPCUA-2988730
CVE-2022-25304 · published · modified · JSON