Lucene search
+L

68918 matches found

Github Security Blog
Github Security Blog
•added 2026/11/12 10:54 p.m.•4 views

msgpack-ruby JRuby decoder makes uncapped header-count allocations; a 5-byte message forces multi-GiB OOM

Summary The JRuby implementation of msgpack msgpack gem, java platform — pure Java decoder under ext/java/ sizes containers directly from the element count written in the message header, with no cap at all: no equivalent of the C unpacker's SHRTMAX clamp since 1.7.3 and none of the buffered-bytes...

7.5CVSS5.8AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder