Skip to content
OpenAdvisories

Package · Azure Linux

python-cbor2

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-26209

    cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads

    cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding deeply nested CBOR structu…

    agronholm cbor2 cbor2 cbor2 Debian Ubuntu Azure Linux PyPI
  • High 7.5
    CVE-2025-64076

    cbor2 C extension decoder flaws can cause denial of service

    Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string() function of the C extension decoder (source/decoder.c): (1) Integer Underflow Leading to Out-of-Bounds Read (CWE-191, CWE-125): An incorrect variable reference …

    cbor2 cbor2 cbor2 python-cbor2 Debian Ubuntu Azure Linux PyPI