peteroupc/CBOR-Java

peteroupc/CBOR-Java

GitHubGitHub
GitHubgithub.com
Releases20
Frequency4 months 2 weeks
Last Release
Stars52
A Java implementation of Concise Binary Object Representation (RFC 8949)
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-23684↗
7.5 HIGH—

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use of this library, this may be a remote attacker.