{"id":"CVE-2018-1000518","aliases":["EUVD-2018-0146","GHSA-6g87-ff9q-v847","PYSEC-2018-79","SUSE-SU-2023:2783-1","SUSE-SU-2023:2783-2","openSUSE-SU-2024:11280-1","openSUSE-SU-2024:14166-1","openSUSE-SU-2026:11240-1"],"status":"published","title":"websockets is vulnerable to denial of service by memory exhaustion","description":"aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in 5.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01805,"percentile":0.78843,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2018-06-26T16:00:00Z","modified":"2026-10-20T10:49:40Z","fixes":[{"ecosystem":"PyPI","package":"websockets","fixed_in":["5.0"],"sources":["ghsa","osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"python-websockets","fixed_in":["9.1-2.1","12.0-2.6","16.0-2.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"websockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"5.0"}]}]},{"source":"osv","ecosystem":"PyPI","package":"websockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0"},{"fixed":"5.0"}]}],"versions":["4.0","4.0.1"]},{"source":"osv","ecosystem":"PyPI","package":"websockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.0"}]}],"versions":["0.1","1.0","2.0","2.1","2.2","2.3","2.4","2.5","2.6","2.7","3.0","3.1","3.2","3.3","3.4","4.0","4.0.1"]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Installer Updates 15 SP1","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-150100.8.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP5","package":"python-humanfriendly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0-150100.6.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"azure-cli-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.1-150100.6.18.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"grpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.0-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-150100.8.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-Deprecated","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-PyGithub","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.5-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-Twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.9.0-150000.3.8.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-aiocontextvars","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.2-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-150100.7.15.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-cryptography-vectors","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-150100.3.11.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-google-api-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.14.2-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-googleapis-common-protos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.0-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-grpcio-gcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.2-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-humanfriendly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0-150100.6.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-jsondiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150100.3.6.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-knack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-150100.3.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-opencensus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-opencensus-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-opencensus-ext-threading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-opentelemetry-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-150100.6.6.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-pytest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.1-150000.7.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-pytest-asyncio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.25.1-150100.6.13.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-websockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP1","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"azure-cli-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.1-150100.6.18.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-Deprecated","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-PyGithub","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.5-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-aiocontextvars","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.2-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-humanfriendly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0-150100.6.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-jsondiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150100.3.6.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-knack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-150100.3.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-opencensus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-opencensus-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-opencensus-ext-threading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-opentelemetry-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-pytest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.10.1-150000.7.5.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-pytest-asyncio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP2","package":"python-websockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"azure-cli-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.1-150100.6.18.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-Deprecated","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-PyGithub","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.5-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-aiocontextvars","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.2-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-humanfriendly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0-150100.6.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-jsondiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150100.3.6.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-knack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-150100.3.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-opencensus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-opencensus-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-opencensus-ext-threading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-opentelemetry-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP3","package":"python-websockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"azure-cli-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.1-150100.6.18.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-Deprecated","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.13-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-PyGithub","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.43.5-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-aiocontextvars","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.2-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-cryptography-vectors","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-150100.3.11.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-humanfriendly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0-150100.6.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-jsondiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150100.3.6.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-knack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-150100.3.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-opencensus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-opencensus-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-opencensus-ext-threading","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-opentelemetry-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.0-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP4","package":"python-websockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1-150100.3.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"azure-cli-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.1-150100.6.18.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"python-humanfriendly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0-150100.6.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"python-jsondiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150100.3.6.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Public Cloud 15 SP5","package":"python-knack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-150100.3.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP4","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP5","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-150100.8.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-150100.7.15.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-150100.6.6.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.25.1-150100.6.13.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-Automat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-incremental","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-150100.6.6.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.25.1-150100.6.13.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"python-Automat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"python-incremental","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-Automat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-incremental","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"python-Automat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"python-incremental","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-150100.8.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-Automat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-Twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.9.0-150000.3.8.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-150100.7.15.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-incremental","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-150100.6.6.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.25.1-150100.6.13.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-Automat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-incremental","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-150100.6.6.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.25.1-150100.6.13.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-Automat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-incremental","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-150100.8.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-Automat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-Twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.9.0-150000.3.8.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-150100.7.15.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-incremental","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-150100.6.6.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.25.1-150100.6.13.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-Automat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-incremental","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-150100.6.6.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.25.1-150100.6.13.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-Automat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-incremental","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"python-Automat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"python-incremental","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"python-Automat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"python-incremental","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python-Automat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python-incremental","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-150100.6.6.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.25.1-150100.6.13.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-Automat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-incremental","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.5.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"azure-cli-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.17.1-150100.6.18.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-constantly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-humanfriendly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"10.0-150100.6.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-hyperlink","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.2.1-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-jsondiff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.0-150100.3.6.3"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-knack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.9.0-150100.3.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"python-zope.interface","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150000.3.4.1"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.9.2-150100.8.3.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.2-150100.7.15.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-psutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.9.1-150100.6.6.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.25.1-150100.6.13.3"}]}],"bundled":7},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"python-websocket-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-150100.6.7.3"}]}],"bundled":7},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-websockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.1-2.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-websockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"12.0-2.6"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-websockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.0-2.1"}]}]}],"products":[{"vendor":"websockets_project","product":"websockets"}],"references":[{"url":"https://github.com/aaugustin/websockets/pull/407","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Third Party Advisory","fix","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1000518","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/websockets/PYSEC-2018-79.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-6g87-ff9q-v847","tags":["advisory"]},{"url":"https://github.com/aaugustin/websockets","tags":["package"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232783-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1099269","tags":["report"]},{"url":"https://bugzilla.suse.com/1133277","tags":["report"]},{"url":"https://bugzilla.suse.com/1144068","tags":["report"]},{"url":"https://bugzilla.suse.com/1162343","tags":["report"]},{"url":"https://bugzilla.suse.com/1177127","tags":["report"]},{"url":"https://bugzilla.suse.com/1178168","tags":["report"]},{"url":"https://bugzilla.suse.com/1182066","tags":["report"]},{"url":"https://bugzilla.suse.com/1184753","tags":["report"]},{"url":"https://bugzilla.suse.com/1194530","tags":["report"]},{"url":"https://bugzilla.suse.com/1197726","tags":["report"]},{"url":"https://bugzilla.suse.com/1198331","tags":["report"]},{"url":"https://bugzilla.suse.com/1199282","tags":["report"]},{"url":"https://bugzilla.suse.com/1203681","tags":["report"]},{"url":"https://bugzilla.suse.com/1204256","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-1000518","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-25659","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36242","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22569","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22570","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1941","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-3171","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232783-2/","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2018-1000518","description":"aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in 5.","status":"published","published":"2018-06-26T16:00:00Z","modified":"2024-08-05T12:40:47.112Z","updated_at":"2026-11-02T14:35:10.685174Z"}],"euvd":[{"id":"EUVD-2018-0146","description":"aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in 5.","status":"published","published":"2018-06-26T16:00:00Z","modified":"2024-08-05T12:40:47Z","updated_at":"2026-11-03T02:39:26.268404Z"}],"ghsa":[{"id":"GHSA-6g87-ff9q-v847","title":"websockets is vulnerable to denial of service by memory exhaustion","description":"The Python websockets library version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appears to be exploitable via sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in version 5.0","status":"published","published":"2018-09-17T20:46:52Z","modified":"2024-11-19T18:06:55Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"},{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:38:21.777721Z"}],"nvd":[{"id":"CVE-2018-1000518","description":"aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in 5.","status":"published","published":"2018-06-26T16:29:01.243Z","modified":"2026-06-17T01:32:49.673Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:04:30.900603Z"}],"osv":[{"id":"CVE-2018-1000518","description":"aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in 5.","status":"published","published":"2018-06-26T16:29:01.243Z","modified":"2026-10-20T10:49:40.105249462Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:07.192756Z"},{"id":"GHSA-6g87-ff9q-v847","title":"websockets is vulnerable to denial of service by memory exhaustion","description":"The Python websockets library version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appears to be exploitable via sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in version 5.0","status":"published","published":"2018-09-17T20:46:52Z","modified":"2024-11-19T18:23:42.891487Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:39.618611Z"},{"id":"openSUSE-SU-2024:11280-1","title":"python36-websockets-9.1-2.1 on GA media","description":"These are all security issues fixed in the python36-websockets-9.1-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:13:56.283072Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:14166-1","title":"python310-websockets-12.0-2.6 on GA media","description":"These are all security issues fixed in the python310-websockets-12.0-2.6 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-07-12T00:00:00Z","modified":"2026-02-04T04:15:37.784827Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2026:11240-1","title":"python313-websockets-16.0-2.1 on GA media","description":"These are all security issues fixed in the python313-websockets-16.0-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-07-09T00:00:00Z","modified":"2026-07-10T10:00:12.03935868Z","updated_at":"2026-11-02T16:58:38.95195Z"},{"id":"PYSEC-2018-79","description":"aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that can result in Denial of Service by memory exhaustion. This attack appear to be exploitable via Sending a specially crafted frame on an established connection. This vulnerability appears to have been fixed in 5.","status":"published","published":"2018-06-26T16:29:00Z","modified":"2023-11-08T03:59:38.649508Z","updated_at":"2026-11-02T15:52:52.192131Z"},{"id":"SUSE-SU-2023:2783-1","title":"Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets","description":"This update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets fixes the following issues:\n\ngrpc:\n- Update in SLE-15 (bsc#1197726, bsc#1144068)\n  \nprotobuf:\n- Fix a potential DoS issue in protobuf-cpp and protobuf-python, CVE-2022-1941, bsc#1203681\n- Fix a potential DoS issue when parsing with binary data in  protobuf-java, CVE-2022-3171, bsc#1204256\n- Fix potential Denial of Service in protobuf-java in the parsing procedure for binary data, CVE-2021-22569, bsc#1194530\n- Add missing dependency of python subpackages on python-six (bsc#1177127)\n- Updated to version 3.9.2 (bsc#1162343)\n  * Remove OSReadLittle* due to alignment requirements.\n  * Don't use unions and instead use memcpy for the type swaps.\n- Disable LTO (bsc#1133277)\n\npython-aiocontextvars:  \n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n\npython-avro:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n\npython-cryptography:  \n- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331)\n  * SECURITY ISSUE: Fixed a bug where certain sequences of update()\n    calls when symmetrically encrypting very large payloads (\u003e2GB) could\n    result in an integer overflow, leading to buffer overflows.\n  CVE-2020-36242\n\npython-cryptography-vectors:\n- update to 3.2 (bsc#1178168, CVE-2020-25659):\n  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,\n    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed\n    by our API, we cannot completely mitigate this vulnerability.\n  * Support for OpenSSL 1.0.2 has been removed.\n  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.\n- update to 3.3.2 (bsc#1198331)\n\npython-Deprecated:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- update to 1.2.13:\n\npython-google-api-core:\n- Update to 1.14.2\n\npython-googleapis-common-protos:\n- Update to 1.6.0\n  \npython-grpcio-gcp:\n- Initial spec for v0.2.2\n\npython-humanfriendly:\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Update to 10.0\n\npython-jsondiff:\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Update to version 1.3.0\n\npython-knack:  \n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Update to version 0.9.0\n\npython-opencensus:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Disable Python2 build\n- Update to 0.8.0\n\npython-opencensus-context:  \n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n\npython-opencensus-ext-threading:  \n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Initial build version 0.1.2\n\npython-opentelemetry-api:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Version update to 1.5.0\n\npython-psutil:\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- update to 5.9.1\n- remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on MicroOS. (bsc#1184753)\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n\npython-PyGithub:\n- Update to 1.43.5:\n\npython-pytest-asyncio:  \n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Initial release of python-pytest-asyncio 0.8.0 \n  \npython-requests:\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n  \npython-websocket-client:\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Update to version 1.3.2\n\npython-websockets:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- update to 9.1:\n ","status":"published","published":"2023-07-04T19:57:03Z","modified":"2026-02-04T02:55:47.296808Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2783-2","title":"Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets","description":"This update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets fixes the following issues:\n\ngrpc:\n- Update in SLE-15 (bsc#1197726, bsc#1144068)\n  \nprotobuf:\n- Fix a potential DoS issue in protobuf-cpp and protobuf-python, CVE-2022-1941, bsc#1203681\n- Fix a potential DoS issue when parsing with binary data in  protobuf-java, CVE-2022-3171, bsc#1204256\n- Fix potential Denial of Service in protobuf-java in the parsing procedure for binary data, CVE-2021-22569, bsc#1194530\n- Add missing dependency of python subpackages on python-six (bsc#1177127)\n- Updated to version 3.9.2 (bsc#1162343)\n  * Remove OSReadLittle* due to alignment requirements.\n  * Don't use unions and instead use memcpy for the type swaps.\n- Disable LTO (bsc#1133277)\n\npython-aiocontextvars:  \n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n\npython-avro:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n\npython-cryptography:  \n- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331)\n  * SECURITY ISSUE: Fixed a bug where certain sequences of update()\n    calls when symmetrically encrypting very large payloads (\u003e2GB) could\n    result in an integer overflow, leading to buffer overflows.\n  CVE-2020-36242\n\npython-cryptography-vectors:\n- update to 3.2 (bsc#1178168, CVE-2020-25659):\n  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,\n    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed\n    by our API, we cannot completely mitigate this vulnerability.\n  * Support for OpenSSL 1.0.2 has been removed.\n  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.\n- update to 3.3.2 (bsc#1198331)\n\npython-Deprecated:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- update to 1.2.13:\n\npython-google-api-core:\n- Update to 1.14.2\n\npython-googleapis-common-protos:\n- Update to 1.6.0\n  \npython-grpcio-gcp:\n- Initial spec for v0.2.2\n\npython-humanfriendly:\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Update to 10.0\n\npython-jsondiff:\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Update to version 1.3.0\n\npython-knack:  \n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Update to version 0.9.0\n\npython-opencensus:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Disable Python2 build\n- Update to 0.8.0\n\npython-opencensus-context:  \n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n\npython-opencensus-ext-threading:  \n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Initial build version 0.1.2\n\npython-opentelemetry-api:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Version update to 1.5.0\n\npython-psutil:\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- update to 5.9.1\n- remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on MicroOS. (bsc#1184753)\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n\npython-PyGithub:\n- Update to 1.43.5:\n\npython-pytest-asyncio:  \n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Initial release of python-pytest-asyncio 0.8.0 \n  \npython-requests:\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n  \npython-websocket-client:\n- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- Update to version 1.3.2\n\npython-websockets:\n- Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)\n- update to 9.1:\n ","status":"published","published":"2023-09-19T21:52:38Z","modified":"2026-02-04T04:23:25.993333Z","updated_at":"2026-11-02T15:53:53.019382Z"}]}}