Skip to content
Threat Feed
Subscribe

Vendor

Pyasn1

2 briefs RSS
low advisory

pyasn1 Uncontrolled Resource Consumption (CVE-2026-59886)

The pyasn1 library is vulnerable to uncontrolled resource consumption (excessive CPU and memory) when converting BER/CER/DER-encoded REAL values to Python floats, which can lead to a denial of service (DoS) in applications that decode untrusted ASN.1 data and then perform operations like printing, logging, comparing, or arithmetic on the decoded `univ.Real` objects.

pyasn1 <= 0.6.3 denial-of-service vulnerability python library
1t 1c
low advisory

pyasn1: Quadratic Complexity in OBJECT IDENTIFIER and RELATIVE-OID Processing Allows Denial of Service

A denial of service vulnerability, identified as CVE-2026-59885, exists in the pyasn1 library caused by quadratic complexity in the processing of OBJECT IDENTIFIER and RELATIVE-OID, which can lead to a denial of service.

pyasn1 denial-of-service vulnerability library
1c