CLEANSTART-2026-XV36403 MessagePack is the serializer implementation for Python msgpack

CVE-2026-114613 affects multiple packages. MessagePack is the serializer implementation for Python msgpack. See references for individual vulnerability details...

Linux Distros Unpatched Vulnerability : CVE-2026-106972

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled recursion in MessagePack\BufferUnpacker::unpack in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service through...

CLEANSTART-2026-GS29486 MessagePack for C# is a MessagePack serializer for C#

Security vulnerability affects the azure-functions-extension-bundles package. MessagePack for C is a MessagePack serializer for C...

PT-2026-134194

Name of the Vulnerable Software and Affected Versions Metalama versions 2023.0.101-rc through 2025.1.17 Metalama versions 2026.0.x through 2026.0.24 Metalama versions 2026.1.0 through 2026.1.18 Metalama + PostSharp extension versions 2024.1 through 2026.1.4 Metalama extension affected versions no...

MessagePack: Unbounded Memory Leak In Msgpack C Extension On Strict_map_key Validation Failure

Impact The msgpack-python C extension "msgpack.cmsgpack" leaks a decoded map value when deserialization rejects a key with "strictmapkey=True" the default. Repeated malformed inputs can cause unbounded process memory growth and denial of service in applications that deserialize attacker-controlle...

CVE-2026-106971

An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service via crafted MessagePack input when the application runs on 32-bit PHP...

CVE-2026-106972

Uncontrolled recursion in MessagePack\BufferUnpacker::unpack in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service through memory exhaustion when an application decodes deeply nested, attacker-controlled MessagePack input...

Eugene Leonovich msgpack.php security vulnerability

A security vulnerability exists in Eugene Leonovich’s msgpack.php version 0.11.0. This vulnerability stems from uncontrolled recursion in the MessagePack\BufferUnpacker::unpack component, allowing attackers to trigger a denial of service via specially crafted input...

CVE-2026-106971

An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service via crafted MessagePack input when the application runs on 32-bit PHP...

CVE-2026-106972

Uncontrolled recursion in MessagePack\BufferUnpacker::unpack in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service through memory exhaustion when an application decodes deeply nested, attacker-controlled MessagePack input...

CVE-2026-106972

An uncontrolled recursion in the MessagePack\BufferUnpacker::unpack component of rybakit/msgpack v0.11.0 allows attackers to cause a Denial of Service DoS via a crafted input...

EUVD-2026-112133

An uncontrolled recursion in the MessagePack\BufferUnpacker::unpack component of rybakit/msgpack v0.11.0 allows attackers to cause a Denial of Service DoS via a crafted input...

Eugene Leonovich msgpack.php security vulnerability

A security vulnerability exists in Eugene Leonovich’s msgpack.php version 0.11.0. This vulnerability stems from an integer overflow in the MessagePack\BufferUnpacker component, allowing attackers to trigger a denial of service via specially crafted input...

CVE-2026-106972

Uncontrolled recursion in MessagePack\BufferUnpacker::unpack in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service through memory exhaustion when an application decodes deeply nested, attacker-controlled MessagePack input...

CVE-2026-106971: Undefined Security Weakness

An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service via crafted MessagePack input when the application runs on 32-bit PHP...

CVE-2026-106971

An integer overflow vulnerability exists in the MessagePack\BufferUnpacker component of the rybakit/msgpack library (versions prior to 0.11.0 ). This flaw allows an attacker to trigger a denial of service (DoS) by providing specially crafted MessagePack input when the application is running on 32...

EUVD-2026-112134

An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack v0.11.0 allows attackers to cause a Denial of Service DoS via a crafted input...

List of Security Fixes and Improvements in Veeam Backup for Microsoft 365

Purpose This article describes all security-related fixes and improvements introduced in each release or update of Veeam Backup for Microsoft 365. This article aims to provide our customers' security and compliance teams with detailed information on security improvements between releases to help...

CVE-2026-106972: Undefined Security Weakness

Uncontrolled recursion in MessagePack\BufferUnpacker::unpack in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service through memory exhaustion when an application decodes deeply nested, attacker-controlled MessagePack input...

CVE-2026-106972

The rybakit/msgpack (msgpack.php) library is vulnerable to a Denial of Service (DoS) via memory exhaustion due to uncontrolled recursion in the MessagePack izzleBufferUnpacker::unpack() component. This flaw occurs when the application decodes deeply nested, attacker-controlled MessagePack input i...