GHSA-VH6J-JC39-FGGF MessagePack-CSharp: MessagePackReader.Skip can recurse without enforcing maximum object graph depth
Summary MessagePackReader.TrySkip recursively descends into nested arrays and maps without incrementing the reader depth or calling the configured depth checks. This bypasses MessagePackSecurity.MaximumObjectGraphDepth, the library's documented protection against deeply nested object graphs. Many...