VDB
HSEC-2026-0007
HSEC-2026-0007
PUBLISHED
CVSS 7.5 HIGH
Denial of Service and Memory Exhaustion in aeson and text-iso8601
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| haskell | aeson | 0.12.0.0, 0.12.0.0 |
Timeline
- May 22, 2026 CVE Published
- May 22, 2026 CVE Updated
References
- https://github.com/haskell/aeson/commit/4e286806524702b562efbb36aa04ec976ec8fb90 patch
- https://github.com/haskell/aeson/commit/42775f45ff8dad934d44617f6f38ee874e1c9df1 patch
- https://github.com/haskell/aeson/commit/b6fb54b11ebf3e499685c4eeb2714ead522252cc patch
- https://github.com/haskell/aeson/commit/eaf97662b7b20499f65e3efcfa7cc175154ff151 patch
- https://github.com/haskell/security-advisories/blob/main/advisories/published/2026/HSEC-2026-0007.md advisory