Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: agronholm Component: Cbor2 Clear all filters
TI-2025-39535 CVE-2025-64076 · GHSA-9q9c-vjxh-p795

Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the…

Priority HIGH 66

Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string() function of the C extension decoder (source/decoder.c): (1) Integer Underflow Leading to Out-of-Bounds Read (CWE-191, CWE…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00489 Published 2025-11-18 Fixed in 5.7.1 CWE-191
TI-2024-17225 CVE-2024-26134 · GHSA-375g-39jq-vq7m

CBOR2 decoder has potential buffer overflow

Priority HIGH 72

cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01167 Published 2024-02-19 Fixed in 5.6.2 CWE-120