MS
Product
msgpack5
7
CVEs
0
On KEV
7.5
Max CVSS
7
New 30D
Severity mix
Critical 0High 2Medium 4Low 1
Watch
Add msgpack5 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-107302 | 7.5 | Oct 8 | msgpack5: Truncated map32 headers throw an unexpected error Affected: >= 4.1.0. < 6.1.0 |
| CVE-2026-107300 | 7.5 | Oct 8 | msgpack5: Many buffered values can exhaust the streaming decoder stack Affected: < 6.1.0 |
| CVE-2026-107301 | 6.5 | Oct 8 | msgpack5: Partial options disable prototype protection Affected: < 6.1.0 |
| CVE-2026-107299 | 5.9 | Oct 8 | msgpack5: Reserved byte can cause unbounded stream buffering Affected: < 6.1.0 |
| CVE-2026-107297 | 5.9 | Oct 8 | msgpack5: Quadratic parsing in the streaming decoder Affected: < 6.1.0 |
| CVE-2026-107298 | 5.3 | Oct 8 | msgpack5: Deeply nested input can exhaust the decoder stack Affected: < 6.1.0 |
| CVE-2026-107296 | 3.7 | Oct 8 | msgpack5: Decoding negative int64 values mutates the input buffer Affected: < 6.1.0 |
Showing 7