Approved changes feed: RSS · Atom

cpe:2.3:a:ncalc:ncalc:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorNcalc (71d4d201-9b80-5217-88ee-3bd343bcdf3f)
ProductNcalc (ea65853c-1612-50aa-a2c4-73daa5c76dd1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
pkg:github/ncalc/ncalc purl2cpe 2026-09-09 08:34:03.128734
pkg:nuget/ncalcsync.signed purl2cpe 2026-09-09 08:34:03.128738

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-55254 vulnerable 2026-07-29 01:00:28.419194 NCalc: Denial of Service via Unbounded and Non-Terminating Factorial Evaluation
MEDIUM (4.8)
NCalc is a fast, lightweight expression evaluator for .NET. Prior to 6.1.1, the factorial operator implementation in src/NCalc.Core/Helpers/MathHelper.cs permits specially crafted expressions with extremely large factorial operands, causing excessive CPU consumption or a non-terminating loop due to integer overflow in the factorial calculation logic when applications evaluate untrusted expressions. This issue is fixed in version 6.1.1.
Published: 2026-07-17T19:55:16.728Z
Updated: 2026-07-20T18:07:31.078Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.