{"action":"Upgrade asyncua to 0.9.96 or later.","affected":[{"fixed":"0.9.96","introduced":"0"}],"component":"asyncua","cve_ids":["CVE-2022-25304"],"ecosystem":"PyPI","epss":0.01583,"exploited":false,"fixed_versions":["0.9.96"],"ghsa_id":"GHSA-mfpj-3qhm-976m","id":"tcs_01M5KGZ54NGHVM9BKHPXGXQD1A","modified_at":"2026-07-13T16:43:51.406907239Z","published_at":"2026-07-09T16:49:51.738918Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2385","https://nvd.nist.gov/vuln/detail/CVE-2022-25304","https://github.com/FreeOpcUa/python-opcua/issues/1466","https://github.com/FreeOpcUa/opcua-asyncio/commit/01c7acf047887b62d979cd4373d370e72a4b9057","https://github.com/FreeOpcUa/opcua-asyncio","https://security.snyk.io/vuln/SNYK-PYTHON-ASYNCUA-2988731","https://security.snyk.io/vuln/SNYK-PYTHON-OPCUA-2988730","https://pypi.org/project/asyncua","https://github.com/advisories/GHSA-mfpj-3qhm-976m"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2026-2385","url":"https://osv.dev/vulnerability/PYSEC-2026-2385"}],"summary":"Uncontrolled Resource Consumption in asyncua and opcua"}