Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: msgpack Clear all filters
TI-2026-61500 CVE-2026-90473 · GHSA-9vjp-f3jg-99pq

msgpack-java through 0.9.12 Integer Overflow via MAP32

Priority LOW 37

msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element counts.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00412 Published 2026-09-12 Will not fix CWE-190
TI-2026-61499 CVE-2026-90472 · GHSA-h5hr-vppv-v9cg

msgpack-java through 0.9.12 Stack Overflow via Nested Arrays

Priority HIGH 70

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays and maps without nesting depth limits.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00566 Published 2026-09-12 Will not fix CWE-674
TI-2026-51079 CVE-2026-72854 · GHSA-p5jw-mm77-f8jp

msgpack-c Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation

Priority MEDIUM 59

msgpack_unpacker_expand_buffer in src/unpack.c, reached through the public msgpack_unpacker_reserve_buffer API, computes its new buffer size using an unchecked size_t addition of the requested size and the amount already…

CVSS 4.0MEDIUM 5.8 Local No auth User interaction EPSS 0.00157 Published 2026-08-20 No fix listed CWE-190