@stablelib/cbor vulnerabilities (npm)

2 vulnerabilities.

• @stablelib/cbor npm StableLib: Stack exhaustion denial of service via deeply nested CBOR arrays, maps, or tags CVE-2026-106447 Fix available 8.7 HighApril 4, 2026
• @stablelib/cbor npm StableLib: Prototype poisoning via `__proto__` map keys in CBOR decoding CVE-2026-106448 Fix available 8.9 HighApril 4, 2026