Browse all 6 CVE security advisories affecting msgpack. AI-powered Chinese analysis, POCs, and references for each vulnerability.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-90473 | msgpack-java through 0.9.12 Integer Overflow via MAP32 — msgpack-java CWE-190 | 5.3 | Medium | 2026-09-12 |
| CVE-2026-90472 | msgpack-java through 0.9.12 Stack Overflow via Nested Arrays — msgpack-java CWE-674 | 5.3 | Medium | 2026-09-12 |
| CVE-2026-72854 | msgpack-c Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation — msgpack-c CWE-190 | 5.3 | Medium | 2026-08-20 |
| CVE-2026-54522 | MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure — msgpack-ruby CWE-416 | 2.1 | Low | 2026-07-30 |
| CVE-2026-57585 | MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error — msgpack-python CWE-416 | 7.5 | High | 2026-06-30 |
| CVE-2026-21452 | MessagePack-Java Vulnerable to Remote Denial of Service via Malicious .msgpack Model File Triggering Unbounded EXT Payload Allocation — msgpack-java CWE-400 | 7.5 | High | 2026-01-02 |
This page lists every published CVE security advisory associated with msgpack. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.