CVE-2026-30922

CVE-2026-30922 is a high-severity Denial of Service (DoS) vulnerability impacting the pyasn1 Python library, specifically versions prior to 0.6.3. An unauthenticated, remote attacker can exploit this by sending crafted ASN.1 data containing deeply nested structures, which triggers uncontrolled recursion in the decoder, leading to a Python interpreter crash or an Out-of-Memory condition. With a CVSSv3.1 score of 7.5 (HIGH), this vulnerability has a low attack complexity and primarily impacts system availability. There is no evidence of active exploitation, and no public exploit code is available on platforms like Metasploit or ExploitDB, though remediation efforts have been noted in community discussions.