Threats tagged 'brew-ansible@10-cve-2026-119195'

A denial of service vulnerability exists in pyasn1 version 0.6.4 and earlier, affecting Ansible@10. The vulnerability arises from quadratic-time CPU usage when decoding constructed OCTET STRING or character strings composed of many fragments, as well as indefinite-length ANY types. This can cause CPU exhaustion if an attacker supplies crafted ASN.1 input to the decoder. The issue affects BER and CER decoding paths and certain non-DER constructed strings. No confidentiality or integrity impacts are reported. The CVSS v3.1 base score is 7.5 (high severity).