Lucene search
+L

2 matches found

OSV
OSV
added 2020/01/31 5:59 p.m.21 views

GHSA-7Q36-4XX7-XCXF Untrusted data can lead to DoS attack due to hash collisions and stack overflow in MessagePack

Impact When this library is used to deserialize messagepack data from an untrusted source, there is a risk of a denial of service attack by either of two vectors: 1. hash collisions - leading to large CPU consumption disproportionate to the size of the data being deserialized. 1. stack overflow -...

4.8CVSS6.9AI score0.01578EPSS
SaveExploits0References8
Rows per page
Query Builder