Executive brief
DAG-CBOR decoder unbounded memory allocation from CBOR headers in github.com/ipld/go-ipld-prime
Affected products
- Go github.com/ipld/go-ipld-prime
Junglewise Threat Intelligence
CVE-2026-35480: GO-2026-5073 - DAG-CBOR decoder unbounded memory allocation from CBOR headers in github.com/ipld/go-ipld-prime
CVE-2026-35480 · Severity: low · CVSS 3.1 · Published 2026-07-07
Technologies: github.com/ipld/go-ipld-prime (Go). Vendors: Go.