GHSA-w5r5-m38g-f9f9
High · 7.5CVSS
7.5
EPSS
—
Published
Mar 2, 2026
CISA due date
—
The record
joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | joserfc | 0 | 1.6.3 |
Related vulnerabilities
- CVE-2026-27932 joserfc is a Python library that provides an implementation of several JSON Object… Same vulnerability
- GHSA-frfh-8v73-gjg4 joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging… Also affects joserfc
- CVE-2025-65015 joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging… Also affects joserfc
- CVE-2026-114731 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by an uncontrolled… CWE-770
- CVE-2026-96377 Allocation of Resources Without Limits or Throttling vulnerability in Drupal Combined… CWE-770
- CVE-2026-96365 Allocation of Resources Without Limits or Throttling vulnerability in Drupal Webform… CWE-770
- CVE-2026-114723 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 allows the ImageMagick resource… CWE-770
- CVE-2026-113811 Algorithm::UrataniTakeda versions from 0.1.5 before 0.1.7 for Perl allow memory… CWE-770