CVE-2020-13616

MEDIUM 5.9CVE-2020-13616 · Published 26/05/2020 · updated 17/06/2026

In short

CVE-2020-13616 is a MEDIUM (CVSS 5.9) vulnerability affecting pichi (pichi project).
Chance of exploitation in the next 30 days (EPSS): 0.93%, higher than 61.0% of all vulnerabilities.
Fix: update to 1.3.0 or later.

Package	Affected versions	Patched versions
pichi pichi_project	`< 1.3.0`	`1.3.0`

The boost ASIO wrapper in net/asio.cpp in Pichi before 1.3.0 lacks TLS hostname verification.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.