{"action":"Upgrade pyasn1 to 0.6.2 or later.","affected":[{"fixed":"0.6.2","introduced":"0.6.1"}],"component":"pyasn1","cve_ids":["CVE-2026-23490"],"ecosystem":"PyPI","epss":0.0076,"exploited":false,"fixed_versions":["0.6.2"],"ghsa_id":"GHSA-63vm-454h-vhhq","id":"tcs_01M5KF29N4Q52FAGXQWEVWZCP1","modified_at":"2026-09-10T03:49:54.331513613Z","published_at":"2026-01-16T19:19:25Z","references":["https://osv.dev/vulnerability/GHSA-63vm-454h-vhhq","https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq","https://nvd.nist.gov/vuln/detail/CVE-2026-23490","https://github.com/pyasn1/pyasn1/commit/be353d755f42ea36539b4f5053c652ddf56979a6","https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970","https://access.redhat.com/errata/RHSA-2026:4148","https://access.redhat.com/errata/RHSA-2026:4147","https://access.redhat.com/errata/RHSA-2026:4146","https://access.redhat.com/errata/RHSA-2026:4145","https://access.redhat.com/errata/RHSA-2026:4144","https://access.redhat.com/errata/RHSA-2026:4143","https://access.redhat.com/errata/RHSA-2026:4142","https://access.redhat.com/errata/RHSA-2026:4141","https://access.redhat.com/errata/RHSA-2026:4140","https://access.redhat.com/errata/RHSA-2026:4139","https://access.redhat.com/errata/RHSA-2026:4138","https://access.redhat.com/errata/RHSA-2026:39894","https://access.redhat.com/errata/RHSA-2026:3959","https://access.redhat.com/errata/RHSA-2026:3958","https://access.redhat.com/errata/RHSA-2026:2302","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:42644","https://access.redhat.com/errata/RHSA-2026:4943","https://access.redhat.com/errata/RHSA-2026:54757","https://access.redhat.com/errata/RHSA-2026:5606","https://access.redhat.com/security/cve/CVE-2026-23490","https://bugzilla.redhat.com/show_bug.cgi?id=2430472","https://github.com/advisories/GHSA-63vm-454h-vhhq","https://github.com/pyasn1/pyasn1","https://github.com/pyasn1/pyasn1/blob/0f07d7242a78ab4d129b26256d7474f7168cf536/pyasn1/codec/ber/decoder.py#L496","https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2","https://github.com/pypa/advisory-database/tree/main/vulns/pyasn1/PYSEC-2026-1810.yaml","https://lists.debian.org/debian-lts-announce/2026/02/msg00002.html","https://pypi.org/project/pyasn1","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-23490.json","https://access.redhat.com/errata/RHSA-2026:2300","https://access.redhat.com/errata/RHSA-2026:2299","https://access.redhat.com/errata/RHSA-2026:2221","https://access.redhat.com/errata/RHSA-2026:19712","https://access.redhat.com/errata/RHSA-2026:1906","https://access.redhat.com/errata/RHSA-2026:1905","https://access.redhat.com/errata/RHSA-2026:1904","https://access.redhat.com/errata/RHSA-2026:1903","https://access.redhat.com/errata/RHSA-2026:17611","https://access.redhat.com/errata/RHSA-2026:17595","https://access.redhat.com/errata/RHSA-2026:17446","https://access.redhat.com/errata/RHSA-2026:14020","https://access.redhat.com/errata/RHSA-2026:13553","https://access.redhat.com/errata/RHSA-2026:13545","https://access.redhat.com/errata/RHSA-2026:13512","https://access.redhat.com/errata/RHSA-2026:13508","https://access.redhat.com/errata/RHSA-2026:37275","https://access.redhat.com/errata/RHSA-2026:3359","https://access.redhat.com/errata/RHSA-2026:3354","https://access.redhat.com/errata/RHSA-2026:30088","https://access.redhat.com/errata/RHSA-2026:28042","https://access.redhat.com/errata/RHSA-2026:2758","https://access.redhat.com/errata/RHSA-2026:2712","https://access.redhat.com/errata/RHSA-2026:24977","https://access.redhat.com/errata/RHSA-2026:24866","https://access.redhat.com/errata/RHSA-2026:2486","https://access.redhat.com/errata/RHSA-2026:2483","https://access.redhat.com/errata/RHSA-2026:2460","https://access.redhat.com/errata/RHSA-2026:2453","https://access.redhat.com/errata/RHSA-2026:24483","https://access.redhat.com/errata/RHSA-2026:24476","https://access.redhat.com/errata/RHSA-2026:2309","https://access.redhat.com/errata/RHSA-2026:2303"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-63vm-454h-vhhq","url":"https://osv.dev/vulnerability/GHSA-63vm-454h-vhhq"}],"summary":"pyasn1 has a DoS vulnerability in decoder"}