msgpack

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

msgpack records in CISA KEV

No msgpack vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Messagepack · all components

TI-2026-17336 CVE-2026-21452 · GHSA-cw39-r4h6-8j3x

HIGH 72

MessagePack for Java is a serializer implementation for Java.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00602 Published 2026-01-02 Fixed in 0.9.11 CWE-400

TI-2026-39368 CVE-2026-54522 · GHSA-4mrv-5p47-p938

MEDIUM 44

MessagePack for Ruby is an implementation of the MessagePack binary serialization format.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00227 Published 2026-07-30 Fixed in 1.8.2 CWE-416

TI-2026-41435 CVE-2026-57585

LOW 39

MessagePack is the serializer implementation for Python msgpack.org.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00488 Published 2026-06-30 Partial fix · 1.2.1 CWE-416