Carbone

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Carbone records in CISA KEV

No Carbone vulnerabilities are listed in CISA KEV.

1 record

TI-2026-15474 CVE-2026-18929 · GHSA-g3fg-g325-xmh2

LOW 31

Carbone is vulnerable to Denial of Service due to lack of protection against zip bombs when processing .docx files.

CVSS 4.0MEDIUM 6.9 Network No auth User interaction EPSS 0.00511 Published 2026-08-18 Fixed in 3.8.2, 4.26.3 +1 CWE-409