CVE-2022-24298: Freeopcua

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

All versions of package freeopcua/freeopcua are vulnerable to Denial of Service (DoS) when bypassing the limitations for excessive memory consumption by sending multiple CloseSession requests with the deleteSubscription parameter equal to False.

Affected products

• Freeopcua Freeopcua: affected versions not specified

Published 2022-08-23. Last modified 2026-06-17.