github.com/ipld/go-ipld-prime vulnerabilities
CVEs whose affected-version data names the github.com/ipld/go-ipld-prime package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-42328Medium· 6.2go-ipld-prime's DAG-CBOR and DAG-JSON decoders have unbounded recursion depth
go-ipld-prime's DAG-CBOR and DAG-JSON decoders have unbounded recursion depth
▾ Sunlitipld · github.com/ipld/go-ipld-primeEPSS 0.12%via OSV
CVE-2026-35480Medium· 6.2go-ipld-prime: DAG-CBOR decoder unbounded memory allocation from CBOR headers
go-ipld-prime: DAG-CBOR decoder unbounded memory allocation from CBOR headers
▾ Sunlitipld · github.com/ipld/go-ipld-primeEPSS 0.16%via OSV