CVE-2026-106972

Uncontrolled recursion in MessagePack\BufferUnpacker::unpack in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service through memory exhaustion when an application decodes deeply nested, attacker-controlled MessagePack input...

CVE-2026-106972

The rybakit/msgpack (msgpack.php) library is vulnerable to a Denial of Service (DoS) via memory exhaustion due to uncontrolled recursion in the MessagePack izzleBufferUnpacker::unpack() component. This flaw occurs when the application decodes deeply nested, attacker-controlled MessagePack input i...

EUVD-2026-112133

An uncontrolled recursion in the MessagePack\BufferUnpacker::unpack component of rybakit/msgpack v0.11.0 allows attackers to cause a Denial of Service DoS via a crafted input...

CVE-2026-106972

Uncontrolled recursion in MessagePack\BufferUnpacker::unpack in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service through memory exhaustion when an application decodes deeply nested, attacker-controlled MessagePack input...

CVE-2026-106972: Undefined Security Weakness

Uncontrolled recursion in MessagePack\BufferUnpacker::unpack in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service through memory exhaustion when an application decodes deeply nested, attacker-controlled MessagePack input...

CVE-2026-106972

Uncontrolled recursion in MessagePack\BufferUnpacker::unpack in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service through memory exhaustion when an application decodes deeply nested, attacker-controlled MessagePack input...