These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
The pyasn1 library for Python, prior to version 0.6.4, is vulnerable to excessive CPU and memory consumption when decoding untrusted ASN.1 data. The univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation, which can cause applications to hang when printing, logging, or comparing decoded objects. This issue is fixed in version 0.6.4. Develope [truncated]
CVE-2026-59885 is a HIGH severity vulnerability in pyasn1, a generic ASN.1 library for Python. The vulnerability affects versions prior to 0.6.4 and can be exploited through crafted ASN.1 data, leading to denial of service attacks. The issue is fixed in version 0.6.4. This vulnerability has significant implications for applications that decode untrusted ASN.1 data, as it can lead to excessive CPU consumpt [truncated]
CVE-2026-59884 is a vulnerability in pyasn1, a generic ASN.1 library for Python. The BER decoder shared by the CER and DER codecs has a flaw that allows a crafted input to force construction of an arbitrarily large integer, leading to unhandled ValueError exceptions in Python 3.11+ error formatting paths. This issue is fixed in version 0.6.4. Affected applications include those that decode untrusted BER, [truncated]
CVE-2026-30922 is a Denial of Service (DoS) vulnerability in pyasn1, a generic ASN.1 library for Python. The vulnerability is caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. This issue can be exploited by an attacker supplying a crafted payload containing thousands of nested SEQUENCE (0x30) or SET (0x31) tags with 'Indefinite Length' (0x80) markers, which forces th [truncated]