cbor2 vulnerabilities (Root)

2 vulnerabilities.

• cbor2 Root cbor2 has a Denial of Service via Uncontrolled Recursion in cbor2.loads CVE-2026-26209 Fix available 7.5 HighMarch 23, 2026
• cbor2 Root CBORDecoder reuse can leak shareable values across decode calls CVE-2025-68131 Fix available 5.5 MediumDecember 31, 2025