{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.5.3"}],"component":"wireguard","cve_ids":["CVE-2023-35838"],"ecosystem":"PyPI","epss":0.00689,"exploited":false,"fixed_versions":[],"id":"tcs_01M5KGKFVX445D5AM414F2SK5Z","modified_at":"2026-05-21T15:00:33.766466434Z","published_at":"2023-08-09T23:15:10.007Z","references":["https://osv.dev/vulnerability/PYSEC-2023-321","https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0015","https://wireguard.com","https://tunnelcrack.mathyvanhoef.com/details.html"],"severity":{"label":"medium","score":5.7},"sources":[{"source":"osv","source_id":"PYSEC-2023-321","url":"https://osv.dev/vulnerability/PYSEC-2023-321"}],"summary":"The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversa"}