npm/@stablelib/cbor CVE-2026-106448: high, EPSS 0.40%
@stablelib/cbor: Prototype poisoning via `__proto__` map keys in CBOR decoding
Action: Upgrade @stablelib/cbor to 2.0.3 or later.
npm i @stablelib/cbor@2.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.3 | - |
Fixed versions
| 2.0.3 |
Sources
- osv: GHSA-w48f-fwg7-ww6p
- https://github.com/StableLib/stablelib/security/advisories/GHSA-w48f-fwg7-ww6p
- https://github.com/StableLib/stablelib/commit/0f153a63b7552a0e8721f640984113e419015026
- https://github.com/StableLib/stablelib
CVE-2026-106448 · published · modified · JSON