https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-25903.htmlhttps://patchthecve.com/cve/CVE-2022-25903.htmlWed, 17 Jun 2026 04:34:28 +0000HIGH 7.5: The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) via the ExtensionObjects and Variants objects, when it allows unlimited nesting levels, which could result in a stack overflow even if the message size is less than the maximum allowed.https://patchthecve.com/cve/CVE-2022-25888.htmlhttps://patchthecve.com/cve/CVE-2022-25888.htmlWed, 17 Jun 2026 04:34:26 +0000HIGH 7.5: The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited number of huge chunks (e.g. 2GB each) whttps://patchthecve.com/cve/CVE-2022-25304.htmlhttps://patchthecve.com/cve/CVE-2022-25304.htmlWed, 17 Jun 2026 04:33:21 +0000HIGH 7.5: All versions of package opcua; all versions of package asyncua are vulnerable to Denial of Service (DoS) due to a missing limitation on the number of received chunks - per single session or in total for all concurrent sessions. An attacker can exploit this vulnerability by sending an unlimited numbe