CVE-2026-48509

The CVE affects MessagePack-CSharp (ASP.NET Core) where the default parameterless MessagePackInputFormatter() uses MessagePackSerializerOptions.Standard with MessagePackSecurity.TrustedData, exposing ASP.NET Core MVC request bodies to DoS likely via UntrustedData protections. Affected versions: M...