Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2023/12/28 9:16 p.m.23 views

msgpackr's conversion of property names to strings can trigger infinite recursion

Impact When decoding user supplied MessagePack messages, users can trigger stuck threads by crafting messages that keep the decoder stuck in a loop. Patches The fix is available in v1.10.1 Workarounds Exploits seem to require structured cloning, replacing the 0x70 extension with your own that...

6.8CVSS6.6AI score0.00685EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder