CVE-2026-30922
HighAdvisory
Published 17 Mar 2026In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.008
- 55th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 387
- of 17,787 indexed, latest versions
- Container images
- 381
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Denial of Service in pyasn1 via Unbounded Recursion
Carried by container images the latest versions of 387 of 17,787 indexed charts deploy, on 381 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| pyasn1pypi | 0.1.9, 0.3.7, 0.4.1, 0.4.2+11 more | 0.6.3 | 381 |
| pyasn1deb | 0.4.2-3, 0.4.8-1, 0.4.8-3 | 0.4.2-3ubuntu0.18.04.1~esm1, 0.4.8-1ubuntu0.2, 0.4.8-3+deb12u2 | 13 |
- OSV records
- DEBIAN-CVE-2026-30922GHSA-jr27-m4p2-rc6rUBUNTU-CVE-2026-30922
- Also known as
- PYSEC-2026-2263, USN-8129-1, USN-8134-1
Charts affected
387 by stars
Container images carrying it
381 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| shadowrhyder/ | 4aae9270356a | pyasn1 | 0.6.3 | 1 |
| sirrend/ | 699e79e3d4e2 | pyasn1 | 0.6.3 | 1 |
| sirrend/ | 7ca688c7abf5 | pyasn1 | 0.6.3 | 1 |
| softonic/ | a64d6c0e0ae5 | pyasn1 | 0.6.3 | 1 |
| softonic/ | d9487a8dd70f | pyasn1 | 0.6.3 | 1 |
| stackstorm/ | 88235ba70cad | pyasn1 | 0.6.3 | 1 |
| stackstorm/ | 6f56d239d280 | pyasn1 | 0.6.3 | 1 |
| stackstorm/ | 33ecfda16608 | pyasn1 | 0.6.3 | 1 |
| stackstorm/ | 4e3f8c7ca52d | pyasn1 | 0.6.3 | 1 |
| stackstorm/ | f190a6212195 | pyasn1 | 0.6.3 | 1 |
| stackstorm/ | 259503496ff9 | pyasn1 | 0.6.3 | 1 |
| stackstorm/ | b1de2055c362 | pyasn1 | 0.6.3 | 1 |
| stackstorm/ | b1a338f64773 | pyasn1 | 0.6.3 | 1 |
| stackstorm/ | 1c8904a3bf67 | pyasn1 | 0.6.3 | 1 |
| stackstorm/ | 1bf35bfaf00c | pyasn1 | 0.6.3 | 1 |
| stackstorm/ | 19fdfffdbba8 | pyasn1 | 0.6.3 | 1 |
| supabase/ | aa1c92c0cf32 | pyasn1 | 0.6.3 | 1 |
| supabase/ | d3aa0c86c7b3 | pyasn1 | 0.6.3 | 1 |
| svtechnmaa/ | 67be2aba9436 | pyasn1 | 0.6.3 | 1 |
| svtechnmaa/ | 6e368ace0977 | pyasn1 | 0.6.3 | 1 |
| swisscomcloud/ | b6639d1a922e | pyasn1 | 0.6.3 | 1 |
| t3nde/ | d2939e9a719b | pyasn1 | 0.6.3 | 1 |
| tachyongroup/ | 7e79b9000856 | pyasn1 | 0.6.3 | 1 |
| tachyongroup/ | f4f7fabe1037 | pyasn1 | 0.6.3 | 1 |
| teknas09/ | 12a1fa85c4aa | pyasn1 | 0.6.3 | 1 |
| timescale/ | a8e3322e1cf9 | pyasn1 pyasn1 | 0.4.8-1ubuntu0.2 0.6.3 | 1 |
| timescale/ | cdb9ae118899 | pyasn1 pyasn1 | 0.4.8-1ubuntu0.2 0.6.3 | 1 |
| timescale/ | d7db8f1085a3 | pyasn1 | 0.6.3 | 1 |
| timescale/ | e8d0a9cc3db5 | pyasn1 pyasn1 | 0.4.8-1ubuntu0.2 0.6.3 | 1 |
| timescale/ | ed719c0cd19d | pyasn1 pyasn1 | 0.4.8-1ubuntu0.2 0.6.3 | 1 |
| tock/ | abf7880e0449 | pyasn1 | 0.6.3 | 1 |
| tomsquest/ | a594c624c5a6 | pyasn1 | 0.6.3 | 1 |
| tussanakorndev/ | 216fdadadf9a | pyasn1 | 0.6.3 | 1 |
| twentycrm/ | 2f78405a78be | pyasn1 pyasn1 | 0.4.8-1ubuntu0.2 0.6.3 | 1 |
| vabene1111/ | 0f8d061895e9 | pyasn1 | 0.6.3 | 1 |
| vabene1111/ | ec4e9e2905b0 | pyasn1 | 0.6.3 | 1 |
| vcnngr/ | 1a849a997b6d | pyasn1 | 0.6.3 | 1 |
| vcnngr/ | 30f1f05e57a6 | pyasn1 | 0.6.3 | 1 |
| voltha/ | c4e41e92f046 | pyasn1 | 0.6.3 | 1 |
| voltha/ | 37f80524c207 | pyasn1 | 0.6.3 | 1 |
| voltha/ | 9ee8c1f4428c | pyasn1 | 0.6.3 | 1 |
| voltha/ | 655c3048a602 | pyasn1 | 0.6.3 | 1 |
| voltha/ | ff596b62de59 | pyasn1 | 0.6.3 | 1 |
| wallabag/ | 5e4c26a7fb4a | pyasn1 | 0.6.3 | 1 |
| wazuh/ | 1da5c38c6a78 | pyasn1 | 0.6.3 | 1 |
| wazuh/ | 21994f40e0da | pyasn1 | 0.6.3 | 1 |
| wazuh/ | 5a065930682d | pyasn1 | 0.6.3 | 1 |
| wazuh/ | f09282d281f6 | pyasn1 | 0.6.3 | 1 |
| weblate/ | 82848df56ecd | pyasn1 | 0.6.3 | 1 |
| wiremind/ | 4dea42c8166c | pyasn1 | 0.6.3 | 1 |