decimal
Hex2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting decimalpage 1 of 1
- CVE-2026-32686MEDIUMCVSS 6.9EG 6.9fixed in 3.0.02026-05-07
vulnerable: 0.1.1 ... 2.4.1 (33 versions)
Uncontrolled Resource Consumption vulnerability in ericmj decimal allows unauthenticated remote Denial of Service. The decimal library does not bound the exponent on parsed input. Storing a decimal with a very large exponent (e.g. Decimal…
- CVE-2026-97853MEDIUMCVSS 6.9EG 6.9fixed in 3.1.22026-10-10
vulnerable: 0.1.1 ... 3.1.1 (36 versions)
Memory Allocation with Excessive Size Value vulnerability in ericmj decimal allows Denial of Service. Decimal.round/3 builds the full result for the requested number of decimal places before the context precision (34 digits by default) is…
Check whether decimal is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for decimal CVEs against the assets you own.
Book a Demo →