THREATOPS
THREAT OPSThreat News › [GHSA] GHSA-cv84-9p8j-fj68 (high) — icalendar has Algorithmic Complexity in Equality

[GHSA] GHSA-cv84-9p8j-fj68 (high) — icalendar has Algorithmic Complexity in Equality

medgithub_advisoriesPublished 2026-08-25

GHSA-cv84-9p8j-fj68 Severity: high CVE: CVE-2026-55099

icalendar has Algorithmic Complexity in Equality

### Summary

`Component.__eq__` compares subcomponents in `O(2^n)` time relative to nesting depth. Because the parser accepts arbitrarily nested components, a sub-kilobyte `.ics` file is enough to make a single equality check run for minutes or hang indefinitely. Any application that compares

Indicators of compromise

Original source: https://github.com/advisories/GHSA-cv84-9p8j-fj68