PyPI/pyasn1 CVE-2026-59885: high 7.5, EPSS 0.62%
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a sm
Action: Upgrade pyasn1 to 0.6.4 or later.
pip install pyasn1==0.6.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.4 | - |
Fixed versions
| 0.6.4 |
Sources
- osv: PYSEC-2026-3456
- https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4
- https://github.com/pyasn1/pyasn1/security/advisories/GHSA-8ppf-4f7h-5ppj
- https://github.com/pyasn1/pyasn1/commit/45bdb19eb7df4b3780fe9c912c63e99bffc39dd9
CVE-2026-59885 · published · modified · JSON