{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"1.0.6"}],"component":"rencode","cve_ids":["CVE-2021-40839"],"ecosystem":"PyPI","epss":0.0552,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-gh8j-2pgf-x458","id":"tcs_01M5KFHPWVCN1110V2J7H84NEC","modified_at":"2024-10-26T18:49:27.328632Z","published_at":"2021-09-13T20:05:51Z","references":["https://osv.dev/vulnerability/GHSA-gh8j-2pgf-x458","https://nvd.nist.gov/vuln/detail/CVE-2021-40839","https://github.com/aresch/rencode/pull/29","https://github.com/aresch/rencode/commit/572ff74586d9b1daab904c6f7f7009ce0143bb75","https://github.com/advisories/GHSA-gh8j-2pgf-x458","https://github.com/aresch/rencode","https://github.com/pypa/advisory-database/tree/main/vulns/rencode/PYSEC-2021-345.yaml","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BMVQRPDVSVZNGGX57CFKCYT3DEYO4QB6","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MCLETLGVM5DBX6QNHQFW6TWGO5T3DENY","https://pypi.org/project/rencode/#history","https://seclists.org/fulldisclosure/2021/Sep/16","https://security.netapp.com/advisory/ntap-20211008-0001"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-gh8j-2pgf-x458","url":"https://osv.dev/vulnerability/GHSA-gh8j-2pgf-x458"}],"summary":"Infinite Loop in rencode"}