Approved changes feed: RSS · Atom

cpe:2.3:a:serde_cbor_project:serde_cbor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSerde Cbor Project (55037341-538e-5ad8-99ab-78e66ecef195)
ProductSerde Cbor (2928c4a7-555e-5a7e-bb9d-82752e36f6a5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/rust-serde-cbor purl2cpe 2026-06-01 10:13:42.081900
pkg:deb/ubuntu/rust-serde-cbor purl2cpe 2026-06-01 10:13:42.081904
pkg:github/pyfisch/cbor purl2cpe 2026-06-01 10:13:42.081908
pkg:rpm/fedora/rust-serde_cbor purl2cpe 2026-06-01 10:13:42.081912
pkg:rpm/opensuse/rust-serde_cbor purl2cpe 2026-06-01 10:13:42.081915

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25001 vulnerable 2026-06-08 05:13:41.779894 Details available
An issue was discovered in the serde_cbor crate before 0.10.2 for Rust. The CBOR deserializer can cause stack consumption via nested semantic tags.
Published: 2020-12-31T08:33:20.000Z
Updated: 2024-08-05T03:00:19.115Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.