StableLib vulnerabilities
We track 2 vulnerabilities in StableLib products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 6, 2026.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest StableLib vulnerabilities
- 8.9 High severity
stablelib: Improperly Controlled Modification of Object Prototype Attributes
StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor CBOR map decoding path creates ordinary JavaScript objects and assigns attacker-controlled keys with bracket assignment. A map key named __proto__ invok
- 8.7 High severity
stablelib: Uncontrolled Recursion
StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor decoder recursively processes nested CBOR arrays, maps, and tags through _decodeValue() without enforcing a maximum nesting depth. A sufficiently deep s