pypi / pyasn1
pyasn1
What changed in pyasn1 0.6, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-21.
1 breaking6 security4 fixes and other
See which of these apply to your code, ranked, in your agent:
npx @unstale/cli initpyasn1 0.611 changes
Breaking changes 1
The ASN.1 decoder now limits nesting depth to prevent stack overflow from deeply nested structures.
Security 6
pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs
pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service
pyasn1: Uncontrolled resource consumption when converting decoded REAL values
Denial of Service in pyasn1 via Unbounded Recursion
Fixed continuation octet limits in the decoder, addressing CVE-2026-23490.
pyasn1 has a DoS vulnerability in decoder
Fixes and other changes 4
Fixed incorrect parsing of fractional seconds.
Fixed OverflowError caused by an oversized BER length field.
Fixed the stacklevel used for DeprecationWarning from deprecated attributes.
Added support for Python 3.14.