open62541 1.3 Release Candidate 1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:open62541:open62541:1.3:rc1:*:*:*:*:*:*

part: a version: 1.3 update: rc1

VendorOpen62541 (92d0f87b-cd1d-5aec-8b19-2cb171aefd91)
ProductOpen62541 (1c17c1ea-d4de-5c60-ada7-41b4e1717cd7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/logicals/open62541 purl2cpe 2026-06-01 10:12:47.005838
pkg:docker/open62541/open62541 purl2cpe 2026-06-01 10:12:47.005840
pkg:github/open62541/open62541 purl2cpe 2026-06-01 10:12:47.005841
pkg:rpm/fedora/open62541 purl2cpe 2026-06-01 10:12:47.005843
pkg:rpm/opensuse/open62541 purl2cpe 2026-06-01 10:12:47.005844

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-25761 vulnerable 2026-06-08 05:41:49.390682 Denial of Service (DoS)
HIGH (7.5)
The package open62541/open62541 before 1.2.5, from 1.3-rc1 and before 1.3.1 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) without sending the Final closing chunk.
Published: 2022-08-23T05:07:11.545Z
Updated: 2024-09-16T20:12:46.712Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.