Cpe:2.3:a:cbor-Sync_project:cbor-Sync:*:*:*:*:*:*:*:*

The cbor-sync library through version 1.0.4 is vulnerable to resource exhaustion via a crafted CBOR payload that causes uncontrolled iteration, leading to potential denial of service.