Threats tagged 'brew-prowler-cve-2026-59884'

CVE-2026-59884 is a denial of service vulnerability in the pyasn1 library's BER/CER/DER decoders. The flaw allows crafted inputs with unbounded long-form tag IDs to cause excessive CPU consumption due to quadratic growth in processing time. On Python 3.11 and later, it can also trigger unhandled ValueErrors during error message formatting, potentially bypassing error handling. The issue affects decoding of untrusted BER/CER/DER inputs in pyasn1 versions from 3.4.0 up to but not including 5.31.1_1. The vulnerability is fixed in version 5.31.1_1 by limiting tag ID size and improving error handling.