ipld go-ipld-prime

• CVE-2026-42328 Medium 6.2 go-ipld-prime: DAG-CBOR and DAG-JSON decoders unbounded recursion depth 0.1%
• CVE-2026-35480 Medium 6.2 go-ipld-prime's DAG-CBOR decoder unbounded memory allocation from CBOR headers 0.2%
• CVE-2023-22460 High 7.5 go-ipld-prime json codec may panic if asked to encode bytes 1.2%