PYSEC-2026-2263

🗓️ 18 Mar 2026 04:17:18Reported by Python Packaging AdvisoryType

pypa🔗 github.com👁 2 Views

pyasn1 before 0.6.3 is vulnerable to Denial of Service from ASN.1 data with indefinite length.

Reporter	Title	Published	Views	Family All 612
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by a Denial of Service vulnerability due to pyasn1	8 Jul 202611:22	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which is vulnerable to multiple CVEs.	31 Mar 202613:54	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	28 Jun 202619:38	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in pyasn1-0.6.1.tar.gz used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-23490)	2 Feb 202612:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Predict Component component uses pyasn1-0.6.2-py3-none-any.whl which is vulnerable to this CVE-2026-30922	1 May 202614:49	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Visual Inspection component uses pyasn1 which is vulnerable to CVE-2026-30922	5 May 202609:43	–	ibm
IBM Security Bulletins	Security Bulletin: Location Service for ESRI Component uses cryptography-46.0.6, pyasn1-0.6.2, requests-2.32.5 and cryptography-46.0.5 library which were vulnerable to multiple CVEs	5 May 202603:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a denial of service in pyasn1 [CVE-2026-30922]	21 May 202615:11	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in pyasn1 bundled with IBM Fusion, IBM Fusion HCI, IBM Fusion Data Cataloging, and IBM Fusion Content-Aware Storage	6 Jul 202621:38	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in pyasn1 affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	4 May 202614:26	–	ibm

Vulners

Node

pypi pyasn1Range0–0.6.3

Source	Link
openwall	www.openwall.com/lists/oss-security/2026/03/20/4
lists	www.lists.debian.org/debian-lts-announce/2026/05/msg00001.html
github	www.github.com/pyasn1/pyasn1/commit/25ad481c19fdb006e20485ef3fc2e5b3eff30ef0
github	www.github.com/pyasn1/pyasn1/security/advisories/GHSA-jr27-m4p2-rc6r

13 Jul 2026 05:51Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17.5

EPSS0.00803

SSVC