Skip to content
OpenAdvisories

Package · Go

github.com/ipld/go-ipld-prime

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.2
    CVE-2026-42328

    go-ipld-prime: DAG-CBOR and DAG-JSON decoders unbounded recursion depth

    go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and tooling for basic operations on IPLD objects. Prior to 0.23.0, the DAG-CBOR and DAG-JSON dec…

    ipld go-ipld-prime github.com/ipld/go-ipld-prime Go
  • Medium 6.2
    CVE-2026-35480

    go-ipld-prime's DAG-CBOR decoder unbounded memory allocation from CBOR headers

    go-ipld-prime is an implementation of the InterPlanetary Linked Data (IPLD) spec interfaces, a batteries-included codec implementations of IPLD for CBOR and JSON, and tooling for basic operations on IPLD objects. Prior to 0.22.0, the DAG-CBOR decoder uses col…

    ipld go-ipld-prime github.com/ipld/go-ipld-prime Go