https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T18:19:14.554621+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-106447 CVE-2026-106447 — StableLib: Stack exhaustion denial of service via deeply nested CBOR arrays, maps, or tags 2026-10-15T18:19:14.555854+00:00

Affected: stablelib

StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor decoder recursively processes nested CBOR arrays, maps, and tags through _decodeValue() without enforcing a maximum nesting depth. A sufficiently deep structure exhausts the JavaScript call stack, causing a decoding exception and potentially terminating an uncaught request worker or process. This issue is fixed in version 2.0.4.