agronholm cbor2

• CVE-2026-26209 High 7.5 cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads 0.4%
• CVE-2025-68131 Medium 5.5 CBORDecoder reuse can leak shareable values across decode calls 0.5%
• CVE-2024-26134 High 7.5 CBOR2 decoder has potential buffer overflow 1.2%