Stack overflow

2020-01-3118:15:00

PRIOn knowledge base

www.prio-n.com

0.01 Low

EPSS

Percentile

83.9%

JSON

MessagePack for C# and Unity before version 1.9.11 and 2.1.90 has a vulnerability where untrusted data can lead to DoS attack due to hash collisions and stack overflow. Review the linked GitHub Security Advisory for more information and remediation steps.

CPENameOperatorVersion
messagepackeq2.0.94 alpha
messagepackeq2.0.110 alpha
messagepackeq2.0.119 beta
messagepackeq2.0.123 beta
messagepackeq2.0.204 beta
messagepackeq2.0.270 rc
messagepackeq2.0.299 rc
messagepackge2.0.323
messagepacklt2.1.80
messagepacklt1.9.3

Name	Operator	Version
messagepack	eq	2.0.94 alpha
messagepack	eq	2.0.110 alpha
messagepack	eq	2.0.119 beta
messagepack	eq	2.0.123 beta
messagepack	eq	2.0.204 beta
messagepack	eq	2.0.270 rc
messagepack	eq	2.0.299 rc
messagepack	ge	2.0.323
messagepack	lt	2.1.80
messagepack	lt	1.9.3