Threats affecting pkg:pypi/scapy

Scapy before 2.7.0 contains an insecure deserialization vulnerability in the load_session function that allows attackers to execute code by supplying a malicious pickle session file. Attackers can trick users into loading a crafted .pkl.gz file via the -s option or conf.session, executing embedded Python code through __reduce__().

CVE-2026-128237 is a denial of service vulnerability in secdev scapy versions before 2.8.0. It arises from inefficient algorithmic complexity in the BER_num_dec() and BERcodec_OID.do_dec() functions, which process ASN.1/BER data. Remote attackers can exploit this by sending oversized OID arcs with many base-128 continuation bytes, causing excessive CPU consumption or a crash on Python 3.11 and later.

CVE-2026-128238 is a vulnerability in secdev scapy versions before 2.8.0 involving uncontrolled recursion in the BER/ASN.1 decoder. An unauthenticated remote attacker can send a specially crafted 833-byte packet containing 250 nested ASN.1 SEQUENCE structures to trigger a RecursionError. This error causes parsing applications handling TLS, SNMP, X.509, or LDAP protocols to crash, even when parsing is done with safe=True.