Search: CVE-2026-119194

CVE-2026-119194 is a high-severity vulnerability in the pyasn1 Python library affecting versions from 0.3.3 up to but not including 0.6.5. The flaw involves inefficient algorithmic complexity in schemaless container decoding, where an attacker can craft BER, CER, or DER inputs with many distinct long tag IDs causing hash collisions. This leads to quadratic CPU usage during decoding, potentially exhausting CPU resources and reducing service availability. The issue is fixed in version 0.6.5.