Skip to content
OpenAdvisories

Package · Maven

com.upokecenter:cbor

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.5
    CVE-2024-23684

    upokecenter CBOR Denial of Service

    Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted …

    com.upokecenter:cbor Maven
  • High —
    GHSA-mm44-wc5p-wqhq

    Denial of service due to reference expansion in versions earlier than 4.0

    ### Impact The CBOR library supports optional tags that enable CBOR objects to contain references to objects within them. Versions earlier than 4.0 resolved those references automatically. While this by itself doesn't cause much of a security problem, a denia…

    com.upokecenter:cbor Maven