MEDIUM6.2Go
GHSA-378j-3jfj-8r9f· CVE-2026-35480, GO-2026-5073go-ipld-prime: DAG-CBOR decoder unbounded memory allocation from CBOR headers
Modified: 9/10/2026
package
Go/github.com/ipld/go-ipld-prime
pkg:go/github.com/ipld/go-ipld-prime
MEDIUM5.9Go
GHSA-c653-6hhg-9x92· CVE-2023-22460, GO-2023-1269go-ipld-prime/codec/json may panic if asked to encode bytes
Modified: 11/8/2023
MEDIUM6.2Go
GHSA-w239-58x2-q8p5· CVE-2026-42328, GO-2026-5684go-ipld-prime's DAG-CBOR and DAG-JSON decoders have unbounded recursion depth
Modified: 9/10/2026
—Go
GO-2023-1269· CVE-2023-22460, GHSA-c653-6hhg-9x92Panic in encoding in github.com/ipld/go-ipld-prime
Modified: 5/20/2024
—Go
GO-2026-5073· CVE-2026-35480, GHSA-378j-3jfj-8r9fDAG-CBOR decoder unbounded memory allocation from CBOR headers in github.com/ipld/go-ipld-prime
Modified: 7/7/2026
—Go
GO-2026-5684· CVE-2026-42328, GHSA-w239-58x2-q8p5Go-ipld-prime's DAG-CBOR and DAG-JSON decoders have unbounded recursion depth in github.com/ipld/go-ipld-prime
Modified: 7/24/2026