CVE-2026-92707

Impact MessagePack-CSharp is vulnerable to denial of service through excessive memory allocation when deserializing attacker-controlled data into "System.Object". When "PrimitiveObjectFormatter" encounters an array, it allocates an "object" using the declared array length before enforcing the...