{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"3.1"}],"component":"coapthon","cve_ids":["CVE-2018-12680"],"ecosystem":"PyPI","epss":0.01503,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-5xc6-fpc7-4qvg","id":"tcs_01M5KG8PSQ0YF889MVCTKV06QW","modified_at":"2023-11-08T03:59:50.835905Z","published_at":"2019-04-02T20:29:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-165","https://github.com/Tanganelli/CoAPthon/issues/135","https://github.com/advisories/GHSA-5xc6-fpc7-4qvg"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-165","url":"https://osv.dev/vulnerability/PYSEC-2019-165"}],"summary":"The Serialize.deserialize() method in CoAPthon 3.1, 4.0.0, 4.0.1, and 4.0.2 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP"}