Lucene search
+L

31 matches found

PyPA
PyPA
•added 2026/09/10 9:44 a.m.•22 views

icalendar has Algorithmic Complexity in Equality

SummaryComponent.eq compares subcomponents in O2^n time relative to nesting depth. Because the parser accepts arbitrarily nested components, a sub-kilobyte .ics file is enough to make a single equality check run for minutes or hang indefinitely. Any application that compares parsed components ==,...

7.5CVSS5.9AI score0.0063EPSS
SaveExploits0References8Affected Software1
osv_pysec
osv_pysec
•added 2026/09/10 9:44 a.m.•23 views

PYSEC-2026-3851 icalendar has Algorithmic Complexity in Equality

Summary Component.eq compares subcomponents in O2^n time relative to nesting depth. Because the parser accepts arbitrarily nested components, a sub-kilobyte .ics file is enough to make a single equality check run for minutes or hang indefinitely. Any application that compares parsed components ==...

7.5CVSS5.9AI score0.0063EPSS
SaveExploits0References8
NVD
NVD
•added 2026/08/25 8:16 p.m.•22 views

CVE-2026-55099

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 7.1.0 until 7.1.3, the Component equality method in src/icalendar/cal/component.py compares nested subcomponents with two membership loops, and each membership test invokes the same method on child...

7.5CVSS0.0063EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/08/25 7:27 p.m.•22 views

icalendar has Algorithmic Complexity in Equality

Summary Component.eq compares subcomponents in O2^n time relative to nesting depth. Because the parser accepts arbitrarily nested components, a sub-kilobyte .ics file is enough to make a single equality check run for minutes or hang indefinitely. Any application that compares parsed components ==...

7.5CVSS5.9AI score0.0063EPSS
SaveExploits0References5Affected Software1
osv_ghsa
osv_ghsa
•added 2026/08/25 7:27 p.m.•17 views

GHSA-CV84-9P8J-FJ68 icalendar has Algorithmic Complexity in Equality

Summary Component.eq compares subcomponents in O2^n time relative to nesting depth. Because the parser accepts arbitrarily nested components, a sub-kilobyte .ics file is enough to make a single equality check run for minutes or hang indefinitely. Any application that compares parsed components ==...

7.5CVSS5.9AI score0.0063EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/08/25 7:27 p.m.•44 views

CVE-2026-55099 icalendar: Algorithmic Complexity in Equality

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 7.1.0 until 7.1.3, the Component equality method in src/icalendar/cal/component.py compares nested subcomponents with two membership loops, and each membership test invokes the same method on child...

7.5CVSS0.0063EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/08/25 7:27 p.m.•21 views

CVE-2026-55099 icalendar: Algorithmic Complexity in Equality

icalendar is an RFC 5545 compatible parser and generator of iCalendar files for Python. From 7.1.0 until 7.1.3, the Component equality method in src/icalendar/cal/component.py compares nested subcomponents with two membership loops, and each membership test invokes the same method on child...

7.5CVSS5.9AI score0.0063EPSS
SaveExploits0References7
CVE
CVE
•added 2026/08/25 7:27 p.m.•72 views

CVE-2026-55099

icalendar is an RFC 5545 iCalendar parser and generator for Python. In versions 7.1.0 through 7.1.3 , the Component equality method in src/icalendar/cal/component.py compares nested subcomponents using two membership loops that recursively invoke the same method on child components, producing O(2...

7.5CVSS5.9AI score0.0063EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•19 views

PT-2026-81994

Summary Component. eq compares subcomponents in O2^n time relative to nesting depth. Because the parser accepts arbitrarily nested components, a sub-kilobyte .ics file is enough to make a single equality check run for minutes or hang indefinitely. Any application that compares parsed components =...

7.5CVSS5.6AI score
SaveExploits0References6
CNVD
CNVD
•added 2018/02/05 12:00 a.m.•17 views

Drupal Open Atrium Module Cross-Site Request Forgery Vulnerability

Drupal is a free, open source content management system developed in PHP and maintained by the Drupal community.Open Atrium module is a collaborative team development module based on the Drupal platform. Multiple cross-site request forgery vulnerabilities exist in subcomponents of the Drupal Open...

8.8CVSS7AI score0.00933EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•21 views

Java Platform Data Compromise

The vulnerability of the Java SE and Java SE Embedded software platform allows a malicious actor to compromise data integrity by using subcomponents called Libraries...

2.6CVSS5.5AI score0.03089EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2016/07/06 12:00 a.m.•36 views

Java Platform Data Compromise

The vulnerability of the Java SE software platform allows a malicious actor to compromise data integrity by using subcomponents called Libraries...

5CVSS8AI score0.03826EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•35 views

Java Development Kit Data Compromise

The vulnerability of the Java Development Kit application development tool relates to JavaFX subcomponents. Exploiting this vulnerability allows a malicious attacker to compromise data confidentiality and integrity by using JavaFX subcomponents...

9.3CVSS7.5AI score0.04354EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•14 views

Java Development Kit Data Compromise

The vulnerability of the Java Development Kit, related to the subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data, by using the Hotspot subcomponent...

10CVSS7.1AI score0.06765EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•24 views

Java Runtime Environment Data Compromise

Vulnerability of the Java Runtime Environment, related to program subcomponents. Exploitation of this vulnerability allows an attacker to compromise data confidentiality and integrity by using the JSSE subcomponent...

4CVSS6.2AI score0.02348EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•18 views

Java Development Kit Data Compromise

The vulnerability of the Java Development Kit, related to the subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data, by using these subcomponents...

9.3CVSS8AI score0.04376EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•30 views

Java Development Kit Data Compromise

The vulnerability of the Java Development Kit application development tool relates to JavaFX subcomponents. Exploiting this vulnerability allows a malicious attacker to manipulate data accessibility by using JavaFX subcomponents...

4.3CVSS6.2AI score0.04924EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•31 views

Java Development Kit Data Compromise

The vulnerability of the Java Development Kit, related to the subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise data confidentiality and integrity by using these subcomponents...

7.5CVSS7.1AI score0.06765EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•30 views

Java Runtime Environment Data Compromise

Vulnerability of the Java Runtime Environment, related to program subcomponents. Exploiting this vulnerability allows a malicious actor to compromise data confidentiality and integrity by using the subcomponents of Libraries...

7.5CVSS7.1AI score0.06765EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2016/07/05 12:00 a.m.•14 views

Java Development Kit Data Compromise

The vulnerability of the Java Development Kit, related to the subcomponents of the program. Exploiting this vulnerability allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of data, by using these subcomponents...

7.5CVSS7.1AI score0.05072EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder