pypi package report

Is asyncua safe?

3 known vulnerabilities, worst severity HIGH.

// reach

10 direct dependencies

3 carry known advisories, worst CRITICAL

5 packages depend on it

an advisory here reaches each of them

Create a free accountfor every dependency path, dependent and what to upgrade
// ai model usage

No published models are known to use this package.

cvss
7.5
high

CVSS v3.1 base score out of 10

epss
1.2%
medium

chance of exploitation in 30 days, 68th percentile of all CVEs

xyz score
4.0
medium

CyberXYZ composite out of 10

fig. 01 — GHSA-gfvq-mxw3-mfq3, the advisory selected below

// 3 advisories

GHSA-gfvq-mxw3-mfq3

HIGHGitHub ratingCVE-2023-26151

Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop and consume excessive memory.

// cvss v3.1 vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector
Network
Attack complexity
Low
Privileges required
None
User interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Checked 2026-11-06 at 22:22 UTC. The most recent advisory here was published 2023-10-03. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Think a verdict here is wrong? Tell us — we respond within 2 business days.