


Perceptive Security
SOC/SIEM Consultancy

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recu…
Published:
17 maart 2026 om 23:00:00
Alert date:
18 maart 2026 om 16:03:59
Source:
nvd.nist.gov
Supply Chain & Dependencies, Web Technologies
The pyasn1 Python library versions prior to 0.6.3 are vulnerable to a Denial of Service attack through uncontrolled recursion when decoding ASN.1 data with deeply nested structures. Attackers can craft payloads with thousands of nested SEQUENCE or SET tags with Indefinite Length markers, causing the decoder to recursively call itself until the Python interpreter crashes with a RecursionError or runs out of memory. This vulnerability is distinct from CVE-2026-23490 and affects the core ASN.1 decoding functionality. Version 0.6.3 addresses this specific recursion issue.
Technical details
Mitigation steps:
Affected products:
pyasn1
Related links:
https://nvd.nist.gov/vuln/detail/CVE-2026-30922
https://github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0
https://github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r
Related CVE's:
Related threat actors:
IOC's:
This article was created with the assistance of AI technology by Perceptive.
