CVE-2026-48513

CVE-2026-48513 — MessagePack-CSharp : Vulnerability in runtime-generated union deserializers by DynamicUnionResolver allows depth enforcement gaps. Prior to versions 2.5.301 and 3.1.7, deserializers did not call MessagePackSecurity.DepthStep(ref reader) or properly adjust reader.Depth during recu...