[ Vendor · 4 CVEs ]
pyasn1
CVEs affecting pyasn1 published in the last 30 days, plus any pyasn1 CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-119194 | 29 Oct 2026 | CVSS 7.5 | pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decodingpyasn1 is a generic ASN.1 library for Python. From 0.3.3 until 0.6.5, schemaless container decoding stores every decoded component's TagSet in a… | Fix |
| CVE-2026-119195 | 29 Oct 2026 | CVSS 7.5 | pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decodingpyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed string and indefinite-length ANY decoding repeatedly concatenates each… | Fix |
| CVE-2026-119196 | 29 Oct 2026 | CVSS 7.5 | pyasn1 has quadratic CPU consumption in constructed BIT STRING decodingpyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, constructed BIT STRING decoding repeatedly shifts and copies the complete bit value… | Fix |
| CVE-2026-119197 | 29 Oct 2026 | CVSS 7.5 | pyasn1 has quadratic-complexity denial of service in binary REAL decodingpyasn1 is a generic ASN.1 library for Python. Prior to 0.6.5, binary REAL decoding builds a large mantissa one octet at a time by shifting a growing… | Fix |