Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Protocol Component: Go-ipld-prime Clear all filters
TI-2026-27610 CVE-2026-35480 · GHSA-378j-3jfj-8r9f

go-ipld-prime's DAG-CBOR decoder unbounded memory allocation from CBOR headers

Priority LOW 27

go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and tooling for basic operations on IPLD objects.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00162 Published 2026-04-07 Fixed in 0.22.0 CWE-770
TI-2023-08709 CVE-2023-22460 · GHSA-c653-6hhg-9x92

go-ipld-prime json codec may panic if asked to encode bytes

Priority MEDIUM 41

go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and tooling for basic operations on IPLD objects.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01165 Published 2023-01-04 Fixed in 0.19.0 CWE-20