ipld
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| go-ipld-prime | 3 | – | May 27, 2026 |
Exploited and recent CVEs
- CVE-2026-42328 go-ipld-prime: DAG-CBOR and DAG-JSON decoders unbounded recursion depth 0.1%
- CVE-2026-35480 go-ipld-prime's DAG-CBOR decoder unbounded memory allocation from CBOR headers 0.2%
- CVE-2023-22460 go-ipld-prime json codec may panic if asked to encode bytes 1.2%