MS
Vendor
msgpack
10
CVEs
0
On KEV
1
New 30D
Products
MS7.5
msgpack-python
msgpack
2 CVEs0 on KEV1 new
ME7.5
Messagepack
Msgpack
3 CVEs0 on KEV0 new
MS7.5
msgpack-java
msgpack
3 CVEs0 on KEV0 new
MS5.3
msgpack-c
msgpack
1 CVEs0 on KEV0 new
MS5.4
msgpack-ruby
msgpack
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-114613 New | MS msgpack-python msgpack | 7.5 | Oct 22 | MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure |
| CVE-2026-90473 | MS msgpack-java msgpack | 5.3 | Sep 12 | msgpack-java through 0.9.12 Integer Overflow via MAP32 |
| CVE-2026-90472 | MS msgpack-java msgpack | 5.3 | Sep 12 | msgpack-java through 0.9.12 Stack Overflow via Nested Arrays |
| CVE-2026-72854 | MS msgpack-c msgpack | 5.3 | Aug 20 | msgpack-c Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation |
| CVE-2026-54522 | MS msgpack-ruby msgpack | 5.4 | Jul 30 | MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure |
| CVE-2026-57585 | MS msgpack-python msgpack | 7.5 | Jun 30 | MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error |
| CVE-2026-21452 | MS msgpack-java msgpack | 7.5 | Jan 2 | MessagePack-Java Vulnerable to Remote Denial of Service via Malicious .msgpack Model File Triggering Unbounded EXT Payload Allocation |