I've been using CBOR via the `ciborium` #Rust crate for the cryptographic signatures (data encoding) in my Dark Bio project. I've restricted it quite a bit, disallowed most types. Today I found that unfortunately it's still problematic, possibly beyond fixing for security uses.