Resource exhaustion in Ericmj Decimal

CVE-2026-32686

Uncontrolled Resource Consumption vulnerability in ericmj decimal allows unauthenticated remote Denial of Service. The decimal library does not bound the exponent on parsed input. Storing a decimal with a very large exponent (e.g. Decimal…

Vulnerability class: DoS (Denial of Service)

EPSS: 0.000 (8.8th percentile) — read the EPSS interpretation.