{"action":"Upgrade cbor2 to 5.6.2 or later.","affected":[{"fixed":"5.6.2","introduced":"5.5.1"}],"component":"cbor2","cve_ids":["CVE-2024-26134"],"ecosystem":"PyPI","epss":0.01177,"exploited":false,"fixed_versions":["5.6.2"],"ghsa_id":"GHSA-375g-39jq-vq7m","id":"tcs_01M5KGM5N6CWGP8G6Z9MVY23AX","modified_at":"2026-06-10T17:14:17.453532103Z","published_at":"2024-02-19T23:15:07Z","references":["https://osv.dev/vulnerability/PYSEC-2024-155","https://github.com/agronholm/cbor2/security/advisories/GHSA-375g-39jq-vq7m","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BT42VXZMMMCSSHMA65KKPOZCXJEYHNR5/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/GX524ZG2XJWFV37UQKQ4LWIH4UICSGEQ/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PWC3VU6YV6EXKCSX5GTKWLBZIDIJNQJY/","https://github.com/agronholm/cbor2/commit/387755eacf0be35591a478d3c67fe10618a6d542","https://github.com/agronholm/cbor2/commit/4de6991ba29bf2290d7b9d83525eda7d021873df","https://github.com/agronholm/cbor2/pull/204","https://github.com/agronholm/cbor2/releases/tag/5.6.2","https://github.com/advisories/GHSA-375g-39jq-vq7m"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"PYSEC-2024-155","url":"https://osv.dev/vulnerability/PYSEC-2024-155"}],"summary":"cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a"}