Lucene search
+L

7 matches found

OSV
OSV
•added 2026/09/10 9:44 a.m.•10 views

PYSEC-2026-3851 icalendar has Algorithmic Complexity in Equality

Summary Component.eq compares subcomponents in O2^n time relative to nesting depth. Because the parser accepts arbitrarily nested components, a sub-kilobyte .ics file is enough to make a single equality check run for minutes or hang indefinitely. Any application that compares parsed components ==...

7.5CVSS5.7AI score0.0063EPSS
SaveExploits0References8
PyPA
PyPA
•added 2026/09/10 9:44 a.m.•10 views

icalendar has Algorithmic Complexity in Equality

SummaryComponent.eq compares subcomponents in O2^n time relative to nesting depth. Because the parser accepts arbitrarily nested components, a sub-kilobyte .ics file is enough to make a single equality check run for minutes or hang indefinitely. Any application that compares parsed components ==,...

7.5CVSS5.7AI score0.0063EPSS
SaveExploits0References8Affected Software1
NVD
NVD
•added 2026/08/25 8:16 p.m.•11 views

CVE-2026-55099

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 7.1.0 until 7.1.3, the Component equality method in src/icalendar/cal/component.py compares nested subcomponents with two membership loops, and each membership test invokes the same method on child...

7.5CVSS0.0063EPSS
SaveExploits0References5
OSV
OSV
•added 2026/08/25 7:27 p.m.•6 views

GHSA-CV84-9P8J-FJ68 icalendar has Algorithmic Complexity in Equality

Summary Component.eq compares subcomponents in O2^n time relative to nesting depth. Because the parser accepts arbitrarily nested components, a sub-kilobyte .ics file is enough to make a single equality check run for minutes or hang indefinitely. Any application that compares parsed components ==...

7.5CVSS5.6AI score0.0063EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/08/25 7:27 p.m.•35 views

CVE-2026-55099 icalendar: Algorithmic Complexity in Equality

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 7.1.0 until 7.1.3, the Component equality method in src/icalendar/cal/component.py compares nested subcomponents with two membership loops, and each membership test invokes the same method on child...

7.5CVSS0.0063EPSS
SaveExploits0References4
OSV
OSV
•added 2026/08/25 7:27 p.m.•10 views

CVE-2026-55099 icalendar: Algorithmic Complexity in Equality

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 7.1.0 until 7.1.3, the Component equality method in src/icalendar/cal/component.py compares nested subcomponents with two membership loops, and each membership test invokes the same method on child...

7.5CVSS5.7AI score
SaveExploits0References7
CVE
CVE
•added 2026/08/25 7:27 p.m.•58 views

CVE-2026-55099

icalendar is an RFC 5545 iCalendar parser and generator for Python. In versions 7.1.0 through 7.1.3 , the Component equality method in src/icalendar/cal/component.py compares nested subcomponents using two membership loops that recursively invoke the same method on child components, producing O(2...

7.5CVSS5.8AI score0.0063EPSS
SaveExploits0References5
Rows per page
Query Builder