Skip to content
OpenAdvisories
High ALAS2023-2026-1417 1 CVE

Important: python-pyasn1 security update (Amazon Linux 2023)

Published Feb 5, 2026 · Updated Feb 5, 2026

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2026-23490: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

Fixed packages 3

ReleasePackageFixed in
Amazon Linux · 2023 python-pyasn1-doc 0:0.4.8-4.amzn2023.0.3
Amazon Linux · 2023 python3-pyasn1 0:0.4.8-4.amzn2023.0.3
Amazon Linux · 2023 python3-pyasn1-modules 0:0.4.8-4.amzn2023.0.3

Vulnerabilities 1

  • High 7.5
    CVE-2026-23490

    pyasn1 has a DoS vulnerability in decoder

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.

    pyasn1 pyasn1 open-webui katib-earlystopping Debian Ubuntu Wolfi PyPI

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2026-23490.html