MS
Product
msgpack5
by mcollina · last CVE Oct 8, 2026
7
CVEs
0
On KEV
7.5
Max CVSS
7
New 30D
Severity mix
Critical 0High 2Medium 4Low 1
Watch

Add msgpack5 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-107302
7.5
1%
Oct 8
msgpack5: Truncated map32 headers throw an unexpected error
Affected: >= 4.1.0. < 6.1.0
CVE-2026-107300
7.5
0%
Oct 8
msgpack5: Many buffered values can exhaust the streaming decoder stack
Affected: < 6.1.0
Showing 2