{"action":"Upgrade cbor2 to 5.6.2 or later.","affected":[{"fixed":"5.6.2","introduced":"5.5.1"}],"component":"cbor2","cve_ids":["CVE-2024-26134"],"ecosystem":"PyPI","epss":0.01177,"exploited":false,"fixed_versions":["5.6.2"],"ghsa_id":"GHSA-375g-39jq-vq7m","id":"tcs_01M5KEV49F6K7866YM5K52DCE7","modified_at":"2026-06-10T17:14:17.011929402Z","published_at":"2024-02-21T00:09:03Z","references":["https://osv.dev/vulnerability/GHSA-375g-39jq-vq7m","https://github.com/agronholm/cbor2/security/advisories/GHSA-375g-39jq-vq7m","https://nvd.nist.gov/vuln/detail/CVE-2024-26134","https://github.com/agronholm/cbor2/pull/204","https://github.com/agronholm/cbor2/commit/387755eacf0be35591a478d3c67fe10618a6d542","https://github.com/agronholm/cbor2/commit/4de6991ba29bf2290d7b9d83525eda7d021873df","https://github.com/agronholm/cbor2","https://github.com/agronholm/cbor2/releases/tag/5.6.2","https://github.com/pypa/advisory-database/tree/main/vulns/cbor2/PYSEC-2024-155.yaml","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BT42VXZMMMCSSHMA65KKPOZCXJEYHNR5","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GX524ZG2XJWFV37UQKQ4LWIH4UICSGEQ","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PWC3VU6YV6EXKCSX5GTKWLBZIDIJNQJY"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-375g-39jq-vq7m","url":"https://osv.dev/vulnerability/GHSA-375g-39jq-vq7m"}],"summary":"Potential buffer overflow in CBOR2 decoder"}