https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-59886.htmlhttps://patchthecve.com/cve/CVE-2026-59886.htmlTue, 21 Jul 2026 14:38:13 +0000HIGH 7.5: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent, causing float convehttps://patchthecve.com/cve/CVE-2026-59885.htmlhttps://patchthecve.com/cve/CVE-2026-59885.htmlTue, 21 Jul 2026 14:38:21 +0000HIGH 7.5: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small crafted payload containing an OID with many arcs consumes excessive CPU per decode() call and cahttps://patchthecve.com/cve/CVE-2026-59884.htmlhttps://patchthecve.com/cve/CVE-2026-59884.htmlTue, 21 Jul 2026 14:37:52 +0000HIGH 7.5: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with CPU