msgpack-CVE-2021-23410-test

Test for https://snyk.io/vuln/SNYK-JS-MSGPACK-1296122 This looks like not vulerbility. var assert = require'assert'; var msgpack = require'msgpack'; function sleepms return new Promiseresolve = setTimeoutresolve, ms; ; async function init var normal = "a": 1, "b": 2, "c": 1, 2, 3 ; var malicious ...

Updated msgpack package fixes a security vulnerability

Integer Overflow in msgpackunpackerexpandbuffer Causes a False-Success Undersized Reservation. CVE-2026-72854...

CVE-2026-114613

A flaw was found in msgpack. A remote attacker could trigger a memory leak by sending specially crafted MessagePack data containing rejected map keys during deserialization. Repeated transmission of such malformed inputs can lead to excessive process memory consumption, resulting in a Denial of...

Linux Distros Unpatched Vulnerability : CVE-2026-114613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value...

DEBIAN-CVE-2026-114613

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

CVE-2026-114613

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

CVE-2026-114613

The msgpack-python C extension (msgpack._cmsgpack) contains an unbounded memory leak in versions prior to 1.2.3 . When deserializing data with strict_map_key=True (the default), the extension fails to release decoded map values upon key validation failure. This vulnerability affects both unpackb(...

CVE-2026-114613 MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

CVE-2026-114613

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

EUVD-2026-108280

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

CVE-2026-114613 MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

CLEANSTART-2026-FV21331 MessagePack is the serializer implementation for Python msgpack

CVE-2026-57585 affects multiple packages. MessagePack is the serializer implementation for Python msgpack. See references for individual vulnerability details...

EUVD-2026-94261

LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport...

Prototype Pollution

Overview msgpack5 is an A msgpack v5 implementation for node.js and the browser, with extension points Affected versions of this package are vulnerable to Prototype Pollution via the msgpack initializer function in index.js when a caller passes an options object. The original code used options =...

Exploit for CVE-2026-105192

CVE-2026-105192 LMCache Unauthenticated RCE via Pickle Dese...

CLEANSTART-2026-KG31017 MessagePack is the serializer implementation for Python msgpack

CVE-2026-57585 affects multiple packages. MessagePack is the serializer implementation for Python msgpack. See references for individual vulnerability details...

SUSE SLED15 / SLES15 Security Update : python-msgpack (SUSE-SU-2026:4443-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2026:4443-1 advisory. This update for python-msgpack fixes the following issue - CVE-2026-57585: Unpacker reuse after a caught error can lead...

Security update for python-msgpack

This update for python-msgpack fixes the following issue CVE-2026-57585: Unpacker reuse after a caught error can lead to an out-of-bounds read and a crash bsc1269947. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper...

SUSE-SU-2026:4443-1 Security update for python-msgpack

This update for python-msgpack fixes the following issue - CVE-2026-57585: Unpacker reuse after a caught error can lead to an out-of-bounds read and a crash bsc1269947...

Uncontrolled Recursion

Overview Affected versions of this package are vulnerable to Uncontrolled Recursion due to recursive deserialization in MessageUnpacker.unpackValue in msgpack-core/src/main/java/org/msgpack/core/MessageUnpacker.java. An attacker can trigger StackOverflowError by supplying MessagePack payloads wit...