hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
pleroma/changelog.d/decimal-3.2.0.security
Phantasm 5810ecd16e
 Sec: Update Decimal to version 3.2.0 
Fixes:
  decimal 3.1.1 - EEF-CVE-2026-97853 (MEDIUM)
    aka: CVE-2026-97853, GHSA-6c27-994x-c52f
    Unbounded allocation in decimal Decimal.round/3 driven by the places argument enables DoS
    https://osv.dev/vulnerability/EEF-CVE-2026-97853
2026-10-21 11:27:55 +02:00

1 line
80 B
Text
Raw Blame History

Update Decimal to version 3.2.0 resolving an unbounded allocation vulnerability
Reference in a new issue View git blame Copy permalink