From 83317379cb68b0caafae35f374e40d95eec106b0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alex=20Gr=C3=B6nholm?= Date: Sun, 22 Mar 2026 17:26:27 +0200 Subject: [PATCH] Updated the max_depth default value in the C function signature CVE: CVE-2026-26209 Upstream-Status: Backport [https://github.com/agronholm/cbor2/commit/d903d62c86de118e8abe626596f9be7b98ac44e9] (cherry picked from commit d903d62c86de118e8abe626596f9be7b98ac44e9) Signed-off-by: Devansh Patel --- source/decoder.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/source/decoder.c b/source/decoder.c index 04c9142..3ce2545 100644 --- a/source/decoder.c +++ b/source/decoder.c @@ -170,7 +170,7 @@ error: // CBORDecoder.__init__(self, fp=None, tag_hook=None, object_hook=None, -// str_errors='strict', read_size=1, *, max_depth=100) +// str_errors='strict', read_size=1, *, max_depth=400) int CBORDecoder_init(CBORDecoderObject *self, PyObject *args, PyObject *kwargs) {