Threats tagged 'brew-dstack-cve-2026-23490'

A Denial-of-Service (DoS) vulnerability exists in pyasn1 version 0.6.1 due to improper handling of malformed RELATIVE-OID values with excessive continuation octets in the decoder. This can lead to memory exhaustion and system hangs when decoding crafted ASN.1 data such as malicious X.509 certificates. The issue affects applications that parse ASN.1 structures, including LDAP servers, TLS/SSL endpoints, and OCSP responders. A fix is available in pyasn1 version 0.20.3_2.