Denial Of Service (ReDoS)

cbor is vulnerable to denial of service. An attacker is able to cause the package to consume excess system resources resulting in an application crash using deeply nested references or multiple same reference to the same object...