The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) via the ExtensionObjects and Variants objects, when it allows unlimited nesting levels, which could result in a stack overflow even if the message si…
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.01428·Published 2022-08-24·Fixed in 0.11.0CWE-787
The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions.
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.01321·Published 2022-08-23·Fixed in 0.11.0CWE-770
All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent se…
CVSS 3.1HIGH 7.5·Network·No auth·No interaction·EPSS 0.01374·Published 2022-08-23·Fixed in 0.9.96CWE-770