CVE-2026-56755

MediumCVSS 6.2

Published: 13/08/2026(UTC)Updated: 13/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.13%

3th percentile - higher than 3% of all known CVEs

The vulnerability causes denial of service (CPU and memory exhaustion) via O(N^2) string concatenation during Debian package upload.

An attacker can overload the server, leading to service unavailability for users.

Apply the patch and consider limiting the size of uploaded packages.

Original NVD description (English source)

Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload