CVE-2026-71852: Python Unconstrained Range Expansion

Unconstrained range expansion detected in dictionary comprehension. When range parameters are parsed from external data, constructing ranges without validating length or maximum entry limits can result in denial of service through high memory and CPU consumption.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-71852-python-unconstrained-range-expansion --engine opengrep

Description

Unconstrained range expansion detected in dictionary comprehension. When range parameters are parsed from external data, constructing ranges without validating length or maximum entry limits can result in denial of service through high memory and CPU consumption.