Description
The Serialize.deserialize() method in CoAPthon3 1.0 and 1.0.1 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, example collect CoAP server and client) when they receive crafted CoAP messages.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | coapthon3 | <= 1.0.1 | — | GHSA-c6fm-rgw4-8q73 |
| PyPI | coapthon3 | >= 1.0 | — | PYSEC-2019-166 |