HIGH 7.5 PyPI
GHSA-375g-39jq-vq7m · CVE-2024-26134, PYSEC-2024-155 Potential buffer overflow in CBOR2 decoder
Modified: 6/10/2026
package
PyPI / cbor2
pkg:pypi/cbor2
HIGH 7.5 PyPI
GHSA-3c37-wwvx-h642 · CVE-2026-26209 cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads
Modified: 3/27/2026
MEDIUM PyPI
GHSA-wcj4-jw5j-44wh · CVE-2025-68131, PYSEC-2025-90 CBORDecoder reuse can leak shareable values across decode calls
Modified: 6/5/2026
HIGH 7.5 PyPI
PYSEC-2024-155 · CVE-2024-26134, GHSA-375g-39jq-vq7m Modified: 6/10/2026
HIGH 7.5 PyPI
PYSEC-2025-90 · CVE-2025-68131, GHSA-wcj4-jw5j-44wh Modified: 5/20/2026