Vulnerabilities

TI-2026-42698 CVE-2026-59884 · GHSA-m4p7-r5rc-7g4j

pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs

MEDIUM 40

pyasn1 is a generic ASN.1 library for Python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00616 Published 2026-07-14 Partial fix · 0.6.4 CWE-400

TI-2026-42699 CVE-2026-59885 · GHSA-8ppf-4f7h-5ppj

MEDIUM 40

pyasn1 is a generic ASN.1 library for Python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00616 Published 2026-07-14 Partial fix · 0.6.4 CWE-400

TI-2026-42700 CVE-2026-59886 · GHSA-hm4w-wwcw-mr6r

LOW 39

pyasn1 is a generic ASN.1 library for Python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0044 Published 2026-07-14 Partial fix · 0.6.4 CWE-400

TI-2026-23747 CVE-2026-30922 · GHSA-jr27-m4p2-rc6r

HIGH 72

pyasn1 is a generic ASN.1 library for Python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00835 Published 2026-03-18 Partial fix · 0.6.3 CWE-674

TI-2026-18923 CVE-2026-23490 · GHSA-63vm-454h-vhhq

HIGH 72

pyasn1 is a generic ASN.1 library for Python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0076 Published 2026-01-16 Partial fix · 0.6.2 CWE-770