CVE-2021-40839: Fedoraproject Fedora

High severity, CVSS 7.5. EPSS: 5.5% chance of exploitation in the next 30 days.

The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabling a remote attack that consumes CPU and memory.

Affected products

• Fedoraproject Fedora: version 34 only; version 35 only
• Rencode Project Rencode: up to and including 1.0.6

Published 2021-09-10. Last modified 2026-06-17.