MS
Product
msgpack-java
by msgpack · last CVE Sep 12, 2026
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch

Add msgpack-java to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-21452
7.5
1%
Jan 2
MessagePack-Java Vulnerable to Remote Denial of Service via Malicious .msgpack Model File Triggering Unbounded EXT Payload Allocation
Affected: < 0.9.11
CVE-2026-90473
5.3
0%
Sep 12
msgpack-java through 0.9.12 Integer Overflow via MAP32
Affected: through 0.9.12
CVE-2026-90472
5.3
1%
Sep 12
msgpack-java through 0.9.12 Stack Overflow via Nested Arrays
Affected: through 0.9.12
Showing 3