MS
Product
msgpack5
by mcollina · last CVE Oct 8, 2026
7
CVEs
0
On KEV
7.5
Max CVSS
7
New 30D
Severity mix
Critical 0High 2Medium 4Low 1
Watch

Add msgpack5 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-107301
6.5
0%
Oct 8
msgpack5: Partial options disable prototype protection
Affected: < 6.1.0
CVE-2026-107299
5.9
0%
Oct 8
msgpack5: Reserved byte can cause unbounded stream buffering
Affected: < 6.1.0
CVE-2026-107297
5.9
0%
Oct 8
msgpack5: Quadratic parsing in the streaming decoder
Affected: < 6.1.0
CVE-2026-107298
5.3
0%
Oct 8
msgpack5: Deeply nested input can exhaust the decoder stack
Affected: < 6.1.0
Showing 4