{"action":"Upgrade pyasn1 to 0.6.3 or later.","affected":[{"fixed":"0.6.3","introduced":"0"}],"component":"pyasn1","cve_ids":["CVE-2026-30922"],"ecosystem":"PyPI","epss":0.00817,"exploited":false,"fixed_versions":["0.6.3"],"ghsa_id":"GHSA-jr27-m4p2-rc6r","id":"tcs_01M5KFPFY5S7BFJ44T4RH2GJ74","modified_at":"2026-09-09T15:45:11.173742426Z","published_at":"2026-03-17T16:17:33Z","references":["https://osv.dev/vulnerability/GHSA-jr27-m4p2-rc6r","https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r","https://nvd.nist.gov/vuln/detail/CVE-2026-30922","https://github.com/pyasn1/pyasn1/commit/5a49bd1fe93b5b866a1210f6bf0a3924f21572c8","https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0","https://access.redhat.com/errata/RHSA-2026:22970","https://access.redhat.com/errata/RHSA-2026:22987","https://access.redhat.com/errata/RHSA-2026:24761","https://access.redhat.com/errata/RHSA-2026:24762","https://access.redhat.com/errata/RHSA-2026:37275","https://access.redhat.com/errata/RHSA-2026:41928","https://access.redhat.com/errata/RHSA-2026:6309","https://access.redhat.com/errata/RHSA-2026:65126","https://access.redhat.com/errata/RHSA-2026:6568","https://access.redhat.com/errata/RHSA-2026:6720","https://access.redhat.com/errata/RHSA-2026:6912","https://access.redhat.com/errata/RHSA-2026:6926","https://access.redhat.com/errata/RHSA-2026:8437","https://access.redhat.com/security/cve/CVE-2026-30922","https://bugzilla.redhat.com/show_bug.cgi?id=2448553","https://github.com/pyasn1/pyasn1","https://github.com/pyasn1/pyasn1/releases/tag/v0.6.3","https://github.com/pypa/advisory-database/tree/main/vulns/pyasn1/PYSEC-2026-2263.yaml","https://lists.debian.org/debian-lts-announce/2026/05/msg00001.html","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-30922.json","https://access.redhat.com/errata/RHSA-2026:10184","https://access.redhat.com/errata/RHSA-2026:12176","https://access.redhat.com/errata/RHSA-2026:13508","https://access.redhat.com/errata/RHSA-2026:13512","https://access.redhat.com/errata/RHSA-2026:13545","https://access.redhat.com/errata/RHSA-2026:13553","https://access.redhat.com/errata/RHSA-2026:13902","https://access.redhat.com/errata/RHSA-2026:13916","https://access.redhat.com/errata/RHSA-2026:13917","https://access.redhat.com/errata/RHSA-2026:14020","https://access.redhat.com/errata/RHSA-2026:16009","https://access.redhat.com/errata/RHSA-2026:17083","https://access.redhat.com/errata/RHSA-2026:17611","https://access.redhat.com/errata/RHSA-2026:19138","https://access.redhat.com/errata/RHSA-2026:19355","https://access.redhat.com/errata/RHSA-2026:19375","https://access.redhat.com/errata/RHSA-2026:19712","https://access.redhat.com/errata/RHSA-2026:20588","https://access.redhat.com/errata/RHSA-2026:22131","https://access.redhat.com/errata/RHSA-2026:22132","https://access.redhat.com/errata/RHSA-2026:22133","https://access.redhat.com/errata/RHSA-2026:22134","https://access.redhat.com/errata/RHSA-2026:22135","https://access.redhat.com/errata/RHSA-2026:22969","http://www.openwall.com/lists/oss-security/2026/03/20/4"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jr27-m4p2-rc6r","url":"https://osv.dev/vulnerability/GHSA-jr27-m4p2-rc6r"}],"summary":"Denial of Service in pyasn1 via Unbounded Recursion"}