Vulnerabilities

TI-2026-39368 CVE-2026-54522 · GHSA-4mrv-5p47-p938

MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure

MEDIUM 44

MessagePack for Ruby is an implementation of the MessagePack binary serialization format.

CVSS 4.0LOW 2.1 Local No auth No interaction EPSS 0.00227 Published 2026-07-30 Fixed in 1.8.2 CWE-416

TI-2026-41435 CVE-2026-57585

LOW 39

MessagePack is the serializer implementation for Python msgpack.org.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00488 Published 2026-06-30 Partial fix · 1.2.1 CWE-416

TI-2026-17336 CVE-2026-21452 · GHSA-cw39-r4h6-8j3x

HIGH 72

MessagePack for Java is a serializer implementation for Java.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00602 Published 2026-01-02 Fixed in 0.9.11 CWE-400