Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-3c37-wwvx-h642
  • PyPI/cbor2
 cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads 23 Mar
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2026-2123
  • PyPI/cbor2
 See record for full details 23 Mar
  • Fix available
  • Severity - 7.5 (High)
GHSA-wcj4-jw5j-44wh
  • PyPI/cbor2
 CBORDecoder reuse can leak shareable values across decode calls 31 Dec 2025
  • Fix available
  • Severity - 5.5 (Medium)
PYSEC-2025-90
  • PyPI/cbor2
 See record for full details 31 Dec 2025
  • Fix available
  • Severity - 7.5 (High)
GHSA-9q9c-vjxh-p795
  • PyPI/cbor2
 cbor2 C extension decoder flaws can cause denial of service 18 Nov 2025
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2025-238
  • PyPI/cbor2
 See record for full details 18 Nov 2025
  • Fix available
  • Severity - 7.5 (High)
GHSA-375g-39jq-vq7m
  • PyPI/cbor2
 Potential buffer overflow in CBOR2 decoder 21 Feb 2024
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2024-155
  • PyPI/cbor2
  • github.com/agronholm/cbor2
 See record for full details 19 Feb 2024
  • Fix available
  • Severity - 7.5 (High)