Skip to content
OpenAdvisories

Package · Go

github.com/ipld/go-ipld-prime

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 6.2
    CVE-2026-42328

    go-ipld-prime: DAG-CBOR and DAG-JSON decoders unbounded recursion depth

    go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and tooling for basic operations on IPLD objects. Prior to 0.23.0, the DAG-CBOR and DAG-JSON dec…

    ipld go-ipld-prime github.com/ipld/go-ipld-prime Go
  • Medium 6.2
    CVE-2026-35480

    go-ipld-prime's DAG-CBOR decoder unbounded memory allocation from CBOR headers

    go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and tooling for basic operations on IPLD objects. Prior to 0.22.0, the DAG-CBOR decoder uses col…

    ipld go-ipld-prime github.com/ipld/go-ipld-prime Go
  • High 7.5
    CVE-2023-22460

    go-ipld-prime json codec may panic if asked to encode bytes

    go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and tooling for basic operations on IPLD objects. Encoding data which contains a Bytes kind Node…

    ipld go-ipld-prime github.com/ipld/go-ipld-prime Go