lancet (>=0.7.3 <=0.7.6) potentially affected by CVE-2015-3220 via tlslite (=0.4.8)

tlslite PYPI version =0.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on tlslite and may be impacted: - lancet =0.7.3, =0.7.6 Source cves: CVE-2015-3220 Source advisory: OSV:PYSEC-2017-96...

CVE-2015-3220

The provided documents identify CVE-2015-3220 as a remote denial of service in the tlslite Python library, affecting versions before 0.4.9 and causing a runtime exception and process crash. The vulnerability details do not specify the exact root cause, affected products beyond tlslite, or a confi...