expliot (=0.1.0a1.post1), py-air-control (>=2.0.0 <=2.3.0) +1 more potentially affected by CVE-2018-12679 via coapthon3 (=1.0.2)

coapthon3 PYPI version =1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on coapthon3 and may be impacted: - expliot =0.1.0a1.post1 - py-air-control =2.0.0, =0.1.0, =0.1.2 Source cves: CVE-2018-12679 Source advisory: OSV:PYSEC-2019-166...

PYSEC-2019-166

The Serialize.deserialize method in CoAPthon3 1.0 and 1.0.1 mishandles certain exceptions, leading to a denial of service in applications that use this library e.g., the standard CoAP server, CoAP client, example collect CoAP server and client when they receive crafted CoAP messages...