pyasn1 (PyPI)
Generic ASN.1 library for Python
Advisories
23
Latest version
0.6.5
Released Oct 27, 2026
License
BSD-2-Clause
OpenSSF Scorecard
6.6 / 10
How to fix
Upgrading to 0.6.5 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "pyasn1>=0.6.5"poetry
poetry add "pyasn1>=0.6.5"uv
uv add "pyasn1>=0.6.5"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-2qm8-x737-gmw5 pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding |
High EPSS 0.43% |
< 0.6.5 | 0.6.5 |
| GHSA-2qm8-x737-gmw5 pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding |
High EPSS 0.43% |
<= 0.6.4 | No fix yet |
| GHSA-mm57-4v3p-rchx pyasn1 has quadratic-complexity denial of service in binary REAL decoding |
High EPSS 0.43% |
< 0.6.5 | 0.6.5 |
| GHSA-mm57-4v3p-rchx pyasn1 has quadratic-complexity denial of service in binary REAL decoding |
High EPSS 0.43% |
<= 0.6.4 | No fix yet |
| GHSA-9m75-vc3g-4x39 pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decoding |
High EPSS 0.53% |
<= 0.6.4 | No fix yet |
| GHSA-9m75-vc3g-4x39 pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decoding |
High EPSS 0.53% |
< 0.6.5 | 0.6.5 |
| GHSA-fm9c-5rcf-2q5p pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decoding |
High EPSS 0.43% |
>= 0.3.3, < 0.6.5 | 0.6.5 |
| GHSA-fm9c-5rcf-2q5p pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decoding |
High EPSS 0.43% |
>= 0.3.3, < 0.6.5 | 0.6.5 |
| GHSA-hm4w-wwcw-mr6r pyasn1: Uncontrolled resource consumption when converting decoded REAL values |
High EPSS 0.62% |
<= 0.6.3 | No fix yet |
| GHSA-hm4w-wwcw-mr6r pyasn1: Uncontrolled resource consumption when converting decoded REAL values |
High EPSS 0.62% |
< 0.6.4 | 0.6.4 |
| GHSA-hm4w-wwcw-mr6r pyasn1: Uncontrolled resource consumption when converting decoded REAL values |
High EPSS 0.62% |
< 0.6.4 | 0.6.4 |
| GHSA-8ppf-4f7h-5ppj pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service |
High EPSS 0.62% |
< 0.6.4 | 0.6.4 |
| GHSA-8ppf-4f7h-5ppj pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service |
High EPSS 0.62% |
<= 0.6.3 | No fix yet |
| GHSA-8ppf-4f7h-5ppj pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service |
High EPSS 0.62% |
< 0.6.4 | 0.6.4 |
| GHSA-m4p7-r5rc-7g4j pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs |
High EPSS 0.62% |
< 0.6.4 | 0.6.4 |
| GHSA-m4p7-r5rc-7g4j pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs |
High EPSS 0.62% |
< 0.6.4 | 0.6.4 |
| GHSA-m4p7-r5rc-7g4j pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs |
High EPSS 0.62% |
< 0.6.4 | 0.6.4 |
| GHSA-jr27-m4p2-rc6r Denial of Service in pyasn1 via Unbounded Recursion |
High EPSS 0.82% |
< 0.6.3 | 0.6.3 |
| GHSA-jr27-m4p2-rc6r Denial of Service in pyasn1 via Unbounded Recursion |
High EPSS 0.82% |
<= 0.6.2 | No fix yet |
| GHSA-jr27-m4p2-rc6r Denial of Service in pyasn1 via Unbounded Recursion |
High EPSS 0.82% |
< 0.6.3 | 0.6.3 |
| GHSA-63vm-454h-vhhq pyasn1 has a DoS vulnerability in decoder |
High EPSS 0.76% |
>= 0.6.1, < 0.6.2 | 0.6.2 |
| GHSA-63vm-454h-vhhq pyasn1 has a DoS vulnerability in decoder |
High EPSS 0.76% |
No fix yet | |
| GHSA-63vm-454h-vhhq pyasn1 has a DoS vulnerability in decoder |
High EPSS 0.76% |
>= 0.6.1, < 0.6.2 | 0.6.2 |
Source: https://github.com/pyasn1/pyasn1
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor