VULNERABILITY INTELLIGENCE
CVE-2024-21526
CVSS score7.5 HIGH
EPSS probability0.57%
CISA KEVNot currently listed
Published2024-07-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
All versions of the package speaker are vulnerable to Denial of Service (DoS) when providing unexpected input types to the channels property of the Speaker object makes it possible to reach an assert macro. Exploiting this vulnerability can lead to a process crash.
Weakness classification
- report@snyk.io: CWE-400
- 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-241