Denial Of Service (DoS)

github.com/gofiber/fiber is vulnerable to Denial Of Service DoS. The vulnerability is due to unvalidated MsgPack deserialization of the fiberflash cookie, which allows an unauthenticated attacker to supply a crafted cookie value that triggers excessive memory allocation, resulting in a...

Deserialization of Untrusted Data

Overview langgraph-checkpoint is a library with base interfaces for LangGraph checkpoint savers. Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the msgpack-encoded checkpoints. An attacker can execute arbitrary code by supplying a crafted msgpack-encoded...