freewvs vulnerable to denial of service through large files

LOW 3.3CVE-2020-15100 · GHSA-9cfv-9463-8gqv · PYSEC-2020-232 · Published 14/07/2020 · updated 17/06/2026

In short

CVE-2020-15100 is a LOW (CVSS 3.3) vulnerability affecting freewvs, freewvs (schokokeks).
Chance of exploitation in the next 30 days (EPSS): 0.34%, higher than 27.2% of all vulnerabilities.
Fix: update to 0.1.1 or later.

Package	Affected versions	Patched versions
freewvs PyPI	`< 0.1.1`	`0.1.1`
freewvs schokokeks	`< 0.1.1`	`0.1.1`

Description

Impact

A user could create a large file that freewvs will try to read, which will terminate a scan process.

Patches

This has been patched by limiting the data freewvs reads: https://github.com/schokokeksorg/freewvs/commit/18bbf2043e53f69e0119d24f8ae4edb274afb9b2

NVD description

In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, which will terminate a scan process. This has been patched in 0.1.1.

References

schokokeksorg/freewvs security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2020-15100 · ADVISORY
schokokeksorg/freewvs commit 18bbf20 · WEB
pypa/advisory-database · WEB
schokokeksorg/freewvs · PACKAGE

More vulnerabilities in freewvs

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free