HIGH
collective
CVE published 2026-08-25
CVE-2026-55099
A denial-of-service vulnerability exists in the icalendar Python library, versions 7.1.0-7.1.2. An attacker can craft a malicious .ics file to cause excessive CPU usage when the library performs equality or comparison operations. This issue is caused by the Component equality method in src/icalendar/cal/component.py, which compares nested subcomponents with two membership loops, leading to O(2^n) work rel [truncated]