stablelib vulnerabilities
CVEs whose affected-version data names the stablelib package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-106447High· 8.7StableLib is a stable library of useful TypeScript and JavaScript code
StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor decoder recursively processes nested CBOR arrays, maps, and tags through _decodeValue() without enforcing a maximum nesting depth…
▾ TwilightStableLib · stablelibvia NVD
CVE-2026-106448High· 8.9StableLib is a stable library of useful TypeScript and JavaScript code
StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor CBOR map decoding path creates ordinary JavaScript objects and assigns attacker-controlled keys with bracket assignment. A map ke…
▾ TwilightStableLib · stablelibvia NVD