Cbor Security Vulnerabilities - February

CVE-2024-21909

PeterO.Cbor versions 4.0.0 through 4.5.0 are vulnerable to a denial ofservice vulnerability. An attacker may trigger the denial of servicecondition by providing crafted data to the DecodeFromBytes or otherdecoding mechanisms in PeterO.Cbor. Depending on the usage of thelibrary, an unauthenticated a...

CVE-2024-23684

Inefficient algorithmic complexity in DecodeFromBytes function in com.upokecenter.cbor Java implementation of Concise Binary Object Representation (CBOR) versions 4.0.0 to 4.5.1 allows an attacker to cause a denial of service by passing a maliciously crafted input. Depending on an application's use...