pyasn1 vulnerabilities
CVEs whose affected-version data names the pyasn1 package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2026-119195High· 7.5pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decoding
pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decoding
CVE-2026-119194High· 7.5pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decoding
pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decoding
CVE-2026-119197High· 7.5pyasn1 has quadratic-complexity denial of service in binary REAL decoding
pyasn1 has quadratic-complexity denial of service in binary REAL decoding
CVE-2026-119196High· 7.5pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding
pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding
CVE-2026-23490High· 7.5PoCpyasn1 is a generic ASN.1 library for Python
pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.