Threats tagged 'brew-dstack-cve-2026-119194'

CVE-2026-119194 is a high-severity vulnerability in dstack's use of pyasn1 version 0.6.4 and earlier, where schemaless decoding of BER, CER, or DER data with many distinct long tag IDs causes quadratic CPU usage. This can lead to CPU exhaustion and reduced service availability when processing attacker-controlled inputs. The issue arises from inefficient handling of TagSet insertions during decoding. A fix is available in version 0.22.6.