CVE-2026-118747

Name of the Vulnerable Software and Affected Versions System.Formats.Cbor versions 8.0.0-0 through 8.0.1 System.Formats.Cbor versions 9.0.0-0 through 9.0.23 System.Formats.Cbor versions 10.0.0-0 through 10.0.14 System.Formats.Cbor versions prior to 11.0.0

Description Inefficient algorithmic complexity in .NET allows an unauthorized attacker to cause a denial of service over a network. This occurs because colliding CBOR map keys can lead to hash-flooding during uniqueness checks.

Recommendations Update System.Formats.Cbor versions 8.0.0-0 through 8.0.1 to version 8.0.2. Update System.Formats.Cbor versions 9.0.0-0 through 9.0.23 to version 9.0.24. Update System.Formats.Cbor versions 10.0.0-0 through 10.0.14 to version 10.0.15. Update System.Formats.Cbor versions prior to 11.0.0 to version 11.0.0.