EUVD-2023-0048

Malicious code in bioql PyPI...

EUVD-2023-0047

Malicious code in bioql PyPI...

datapoints (>=0.0.1 <=0.0.2), hvl-ccb (>=0.12.0 <=0.12.3) potentially affected by CVE-2023-26150 via asyncua (>=0.9.94 <=0.9.95)

asyncua PYPI version =0.9.94, =0.0.1, =0.12.0, =0.12.3 Source cves: CVE-2023-26150 Source advisory: OSV:GHSA-2894-QCQF-G23G...

datapoints (>=0.0.1 <=0.0.2), hvl-ccb (>=0.12.0 <=0.12.3) potentially affected by CVE-2023-26151 via asyncua (>=0.9.94 <=0.9.95)

asyncua PYPI version =0.9.94, =0.0.1, =0.12.0, =0.12.3 Source cves: CVE-2023-26151 Source advisory: OSV:GHSA-GFVQ-MXW3-MFQ3...

datapoints (>=0.0.1 <=0.0.2), hvl-ccb (>=0.12.0 <=0.12.3) potentially affected by CVE-2023-26150 via asyncua (>=0.9.94 <=0.9.95)

asyncua PYPI version =0.9.94, =0.0.1, =0.12.0, =0.12.3 Source cves: CVE-2023-26150 Source advisory: OSV:PYSEC-2023-189...

datapoints (>=0.0.1 <=0.0.2), hvl-ccb (>=0.12.0 <=0.12.3) potentially affected by CVE-2023-26151 via asyncua (>=0.9.94 <=0.9.95)

asyncua PYPI version =0.9.94, =0.0.1, =0.12.0, =0.12.3 Source cves: CVE-2023-26151 Source advisory: OSV:PYSEC-2023-190...

PT-2023-20529 · Asyncua · Asyncua

Name of the Vulnerable Software and Affected Versions: asyncua versions prior to 0.9.96 Description: The issue is related to Improper Authentication, allowing access to Address Space without encryption and authentication. This is due to missing checks for services that require an active session...

datapoints (>=0.0.1 <=0.0.2), hvl-ccb (>=0.12.0 <=0.12.3) potentially affected by CVE-2023-26151 via asyncua (>=0.9.94 <=0.9.95)

asyncua PYPI version =0.9.94, =0.0.1, =0.12.0, =0.12.3 Source cves: CVE-2023-26151 Source advisory: SNYK:PYTHON-ASYNCUA-5673709...

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks e....

datapoints (>=0.0.1 <=0.0.2), hvl-ccb (>=0.12.0 <=0.12.3) potentially affected by CVE-2022-25304 via asyncua (>=0.9.94 <=0.9.95)

asyncua PYPI version =0.9.94, =0.0.1, =0.12.0, =0.12.3 Source cves: CVE-2022-25304 Source advisory: SNYK:PYTHON-ASYNCUA-2988731...