cbor2 has 2 CVEs on record. The median CVSS is 7.5 (high).
CVEs per month
Last 12 months, by publish date
1025/101125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/09
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Products
- cbor2 2
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
cbor2 vulnerabilities
CVEs affecting cbor2, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2025-68131MediumCBORDecoder reuse can leak shareable values across decode calls
CBORDecoder reuse can leak shareable values across decode calls
▾ Sunlitcbor2 · cbor2EPSS 0.47%via OSV
CVE-2025-64076High· 7.5Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string() function of the C extension decoder (s…
Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string() function of the C extension decoder (source/decoder.c): (1) Integer Underflow Leading to Out-of-Bounds Read (CWE-191, CWE-125): An incorre…
▾ Twilightcbor2 · cbor2EPSS 0.46%via OSV