Priority MEDIUM 44
### Impact When this library is used to deserialize messagepack data from an untrusted source, there is a risk of a denial of service attack by an attacker that sends data contrived to produce hash collisions, leading to…
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00374 · Published 2024-10-17 · Fixed in 2.5.187, 3.0.214-rc.1 CWE-328
Priority MEDIUM 42
MessagePack for C# is a MessagePack serializer for C#.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00509 · Published 2026-06-22 · Fixed in 3.1.7, 2.5.301 CWE-20
Priority LOW 39
MessagePack for C# is a MessagePack serializer for C#.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00471 · Published 2026-06-22 · Fixed in 3.1.7, 2.5.301 CWE-674
Priority LOW 36
MessagePack for C# is a MessagePack serializer for C#.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00405 · Published 2026-06-22 · Fixed in 3.1.7, 2.5.301 CWE-674
Priority LOW 36
MessagePack for C# is a MessagePack serializer for C#.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00437 · Published 2026-06-22 · Fixed in 3.1.7, 2.5.301 CWE-1188
Priority LOW 32
MessagePack for C# and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01578 · Published 2020-01-31 · Fixed in 1.9.11, 2.1.90 CWE-121
Priority LOW 31
MessagePack for C# is a MessagePack serializer for C#.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00678 · Published 2026-10-15 · Fixed in 2.5.303, 3.1.9 CWE-1325
Priority LOW 28
MessagePack for C# is a MessagePack serializer for C#.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00348 · Published 2026-06-22 · Fixed in 3.1.7, 2.5.301 CWE-470
Priority LOW 28
MessagePack for C# is a MessagePack serializer for C#.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00405 · Published 2026-06-22 · Fixed in 3.1.7, 2.5.301 CWE-407
Priority LOW 28
MessagePack for C# is a MessagePack serializer for C#.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00405 · Published 2026-06-22 · Fixed in 3.1.7, 2.5.301 CWE-770
Priority LOW 28
MessagePack for C# is a MessagePack serializer for C#.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00405 · Published 2026-06-22 · Fixed in 3.1.7, 2.5.301 CWE-770
Priority LOW 28
MessagePack for C# is a MessagePack serializer for C#.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00405 · Published 2026-06-22 · Fixed in 3.1.7, 2.5.301 CWE-674
Priority LOW 28
MessagePack for C# is a MessagePack serializer for C#.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00405 · Published 2026-06-22 · Fixed in 3.1.7, 2.5.301 CWE-407
Priority LOW 28
MessagePack for C# is a MessagePack serializer for C#.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00405 · Published 2026-06-22 · Fixed in 3.1.7, 2.5.301 CWE-409
Priority LOW 28
MessagePack for C# is a MessagePack serializer for C#.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.00416 · Published 2026-06-22 · Fixed in 3.1.7, 2.5.301 CWE-1188
THREATIST.IORead the docs