stablelib vulnerabilities

2 known vulnerabilities in stablelib from StableLib. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.9 High severity

  stablelib: Improperly Controlled Modification of Object Prototype Attributes

  CVE-2026-106448Oct 6, 2026StableLib

  StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor CBOR map decoding path creates ordinary JavaScript objects and assigns attacker-controlled keys with bracket assignment. A map key named __proto__ invok

• 8.7 High severity

  stablelib: Uncontrolled Recursion

  CVE-2026-106447Oct 6, 2026StableLib

  StableLib is a stable library of useful TypeScript and JavaScript code. Prior to 2.0.4, the @stablelib/cbor decoder recursively processes nested CBOR arrays, maps, and tags through _decodeValue() without enforcing a maximum nesting depth. A sufficiently deep s