{"id":"GHSA-qcxq-75wr-5cm8","summary":"ldap3_proto has LDAP Filter stack exhaustion","details":"### Impact\nLDAP queries are not validated for depth, which can cause the parser (both PEG and ASN) to exhaust the stack. This *may* cause a denial of service in applications that process queries.\n\n### Workarounds\nN/A\n\n### References\nRelated to GHSA-r5fr-9gmv-jggh","modified":"2026-08-14T19:30:08.115903092Z","published":"2026-05-06T23:39:47Z","database_specific":{"github_reviewed":true,"github_reviewed_at":"2026-05-06T23:39:47Z","nvd_published_at":null,"cwe_ids":["CWE-674","CWE-770"],"severity":"HIGH"},"references":[{"type":"WEB","url":"https://github.com/kanidm/ldap3/security/advisories/GHSA-qcxq-75wr-5cm8"},{"type":"ADVISORY","url":"https://github.com/advisories/GHSA-r5fr-9gmv-jggh"},{"type":"PACKAGE","url":"https://github.com/kanidm/ldap3"}],"affected":[{"package":{"name":"ldap3_proto","ecosystem":"crates.io","purl":"pkg:cargo/ldap3_proto"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.7.1"}]}],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/05/GHSA-qcxq-75wr-5cm8/GHSA-qcxq-75wr-5cm8.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N"}]}