Vulnerabilities for pyasn1

First version without a known vulnerability: 0.6.4

Details

• GHSA-hm4w-wwcw-mr6r2026-07-21

  pyasn1: Uncontrolled resource consumption when converting decoded REAL values

  Fixed in: 0.6.4

• GHSA-8ppf-4f7h-5ppj2026-07-21

  pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service

  Fixed in: 0.6.4

• GHSA-m4p7-r5rc-7g4j2026-07-21

  pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs

  Fixed in: 0.6.4

• GHSA-jr27-m4p2-rc6r2026-03-17

  Denial of Service in pyasn1 via Unbounded Recursion

  Fixed in: 0.6.3

• GHSA-63vm-454h-vhhq2026-01-16

  pyasn1 has a DoS vulnerability in decoder

  Fixed in: 0.6.2