CVE-2026-59886
2 advisories.
PyPI/pyasn1 CVE-2026-59886: high 7.5, EPSS 0.62%
pyasn1: Uncontrolled resource consumption when converting decoded REAL values
Action: Upgrade pyasn1 to 0.6.4 or later.
pip install pyasn1==0.6.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.4 | - |
Fixed versions
| 0.6.4 |
Sources
- osv: GHSA-hm4w-wwcw-mr6r
- https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r
- https://nvd.nist.gov/vuln/detail/CVE-2026-59886
- https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886
- https://github.com/pyasn1/pyasn1
- https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4
CVE-2026-59886 · published · modified · JSON
PyPI/pyasn1 CVE-2026-59886: high 7.5, EPSS 0.62%
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER,
Action: Upgrade pyasn1 to 0.6.4 or later.
pip install pyasn1==0.6.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.4 | - |
Fixed versions
| 0.6.4 |
Sources
- osv: PYSEC-2026-3457
- https://github.com/pyasn1/pyasn1/releases/tag/v0.6.4
- https://github.com/pyasn1/pyasn1/security/advisories/GHSA-hm4w-wwcw-mr6r
- https://github.com/pyasn1/pyasn1/commit/e60c691cb91addb8fcefa2f537e85ede6fb1e886
CVE-2026-59886 · published · modified · JSON