Vendors / agronholm Records 7 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 4
Exploited now agronholm records in CISA KEV No agronholm vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 72
cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00397 · Published 2026-03-23 · Partial fix · 5.9.0 CWE-674
Priority HIGH 72
cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01167 · Published 2024-02-19 · Fixed in 5.6.2 CWE-120
Priority HIGH 66
Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string() function of the C extension decoder (source/decoder.c): (1) Integer Underflow Leading to Out-of-Bounds Read (CWE-191, CWE…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00489 · Published 2025-11-18 · Fixed in 5.7.1 CWE-191
Priority MEDIUM 64
cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format.
CVSS 4.0 MEDIUM 5.5· Network · No auth · No interaction · EPSS 0.00459 · Published 2025-12-31 · Partial fix · 5.8.0 CWE-212
Priority MEDIUM 48
AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio.
CVSS 4.0 CRITICAL 9.3· Network · No auth · No interaction · EPSS 0.00289 · Published 2026-09-22 · Partial fix · 4.14.2 CWE-295
Priority LOW 32
AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio.
CVSS 4.0 HIGH 7.0· Local · High privileges · No interaction · EPSS 0.00108 · Published 2026-09-18 · Partial fix · 4.14.2 CWE-266
Priority LOW 29
AnyIO is a high level asynchronous concurrency and networking framework that works on top of either Trio or asyncio.
CVSS 4.0 MEDIUM 6.8· Local · Low privileges · No interaction · EPSS 0.00157 · Published 2026-09-18 · Partial fix · 4.14.2 CWE-770
Open these records in search → All records by CVSS severity
1 4 2 0 0
THREATIST.IORead the docs