PyPI/coapthon CVE-2018-12680: unknown, EPSS 1.50%
The Serialize.deserialize() method in CoAPthon 3.1, 4.0.0, 4.0.1, and 4.0.2 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.1 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2019-165
- https://github.com/Tanganelli/CoAPthon/issues/135
- https://github.com/advisories/GHSA-5xc6-fpc7-4qvg
CVE-2018-12680 · published · modified · JSON