# System.Formats.Cbor (NuGet) vulnerabilities

1 known vulnerability (1 high), with the versions each affects and the releases that fix them.

## At a glance

- Latest release: 11.0.0 (Nov 10, 2026): no advisory affects it
- Newest unaffected release: 11.0.0 (Nov 10, 2026), the latest release
- Releases: 109 since 5.0.0 (Nov 9, 2020)
- Registry: https://www.nuget.org/packages/System.Formats.Cbor
- Releases read: Nov 11, 2026

## Version timeline

Affected versions per advisory, in version order:

- CVE-2026-118747: 8.0.0-preview.1.23110.8 to 8.0.1 (8.0.2 is outside it); 9.0.0-preview.1.24080.9 to 9.0.23 (9.0.24 is outside it); 10.0.0-preview.1.25080.5 to 10.0.14 (10.0.15 is outside it); 11.0.0-preview.1.26104.118 to 11.0.0-rc.3.26522.148 (11.0.0 is outside it)

## Advisories (1)

### [CVE-2026-118747](https://cve.now/CVE-2026-118747): .NET Denial of Service Vulnerability

- Severity: High 7.5
- Published: Nov 10, 2026
- Affected: from 8.0.0-0, fixed in 8.0.2; from 9.0.0-0, fixed in 9.0.24; from 10.0.0-0, fixed in 10.0.15; from 11.0.0-0, fixed in 11.0.0.
- Fixed in 8.0.2 (released Nov 10, 2026, the day of disclosure), 9.0.24 (released Nov 10, 2026, the day of disclosure), 10.0.15 (released Nov 10, 2026, the day of disclosure) and 1 other version.
- The latest release, 11.0.0, is not affected.

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/packages/nuget/system.formats.cbor
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.