PyPI/opcua CVE-2022-25304: high 7.5, EPSS 1.58%
Uncontrolled Resource Consumption in asyncua and opcua
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.98.13 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-mfpj-3qhm-976m#PyPI/opcua
- https://nvd.nist.gov/vuln/detail/CVE-2022-25304
- https://github.com/FreeOpcUa/python-opcua/issues/1466
- https://github.com/FreeOpcUa/opcua-asyncio/commit/01c7acf047887b62d979cd4373d370e72a4b9057
- https://github.com/FreeOpcUa/opcua-asyncio
- https://security.snyk.io/vuln/SNYK-PYTHON-ASYNCUA-2988731
- https://security.snyk.io/vuln/SNYK-PYTHON-OPCUA-2988730
CVE-2022-25304 · published · modified · JSON