The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabling a remote attack that consumes CPU and memory.
"https://github.com/pypa/advisory-database/blob/main/vulns/rencode/PYSEC-2021-345.yaml"