diff --git a/lib/dataconnection/StreamConnection/Cbor.ts b/lib/dataconnection/StreamConnection/Cbor.ts
index 523fdf0a2..39117b889 100644
--- a/lib/dataconnection/StreamConnection/Cbor.ts
+++ b/lib/dataconnection/StreamConnection/Cbor.ts
@@ -1,6 +1,14 @@
 import type { Peer } from "../../peer.js";
-import { Decoder, Encoder } from "cbor-x";
+import {
+	Decoder as DecoderNoEval,
+	Encoder as EncoderNoEval,
+	//@ts-expect-error: Cbor doesn’t provide types for the "no-eval" version
+} from "cbor-x/index-no-eval";
 import { StreamConnection } from "./StreamConnection.js";
+import type { Decoder as DecoderT, Encoder as EncoderT } from "cbor-x";
+
+const Decoder: DecoderT = DecoderNoEval;
+const Encoder: EncoderT = EncoderNoEval;
 
 const NullValue = Symbol.for(null);