Lucene search
+L

3 matches found

Mageia
Mageia
•added 2026/09/07 6:46 p.m.•9 views

Updated python-pyasn1 packages fix security vulnerabilities

The BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets in a loop with no upper bound on the size of the tag ID. A crafted input can force the decoder to build an arbitrarily large integer, with CPU cost growing quadratically in input size — a 1 ...

7.5CVSS5.9AI score0.00616EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2026/08/28 10:03 a.m.•13 views

Security Bulletin: IBM Maximo Application Suite - Location Service for Esri Component uses pyasn1-0.6.3 which is vulnerable to CVE-2026-59884, CVE-2026-59885, CVE-2026-59886

Summary IBM Maximo Application Suite - Location Service for Esri Component uses pyasn1-0.6.3 which is vulnerable to CVE-2026-59884, CVE-2026-59885, CVE-2026-59886. This bulletin contains information regarding these vulnerabilities and their fixtures. Vulnerability Details CVEID:CVE-2026-59884...

7.5CVSS7.3AI score0.00616EPSS
SaveExploits0Affected Software1
NVD
NVD
•added 2026/07/08 5:17 p.m.•23 views

CVE-2026-59887

linkify-it is a links recognition library with full Unicode support. Prior to 5.0.2, the mailto: schema validator used by .test and .match can be invoked at every mailto: occurrence and scan the remaining input through srcemailname in lib/re.mjs, causing On^2 CPU consumption on crafted user text...

7.5CVSS0.00644EPSS
SaveExploits1References3
Rows per page
Query Builder