Uncontrolled Recursion

Overview msgpack5 is an A msgpack v5 implementation for node.js and the browser, with extension points Affected versions of this package are vulnerable to Uncontrolled Recursion via the decode function in lib/decoder.js, which does not limit the nesting depth of decoded MessagePack structures. An...

Inefficient Algorithmic Complexity

Overview msgpack5 is an A msgpack v5 implementation for node.js and the browser, with extension points Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the decode function in lib/decoder.js when processing deeply nested or large streaming container...