msgpack-python DoS

The vulnerability in the Python library for MessagePack serialization msgpack-python stems from insufficient resource control during its existence. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

EUVD-2026-108280

MessagePack: Unbounded memory leak in msgpack C extension on strictmapkey validation failure...

SUSE CVE-2026-114613

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

Linux Distros Unpatched Vulnerability : CVE-2026-114613

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value...

DEBIAN-CVE-2026-114613

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

CVE-2026-114613

The msgpack-python C extension (msgpack._cmsgpack) contains an unbounded memory leak in versions prior to 1.2.3 . When deserializing data with strict_map_key=True (the default), the extension fails to release decoded map values upon key validation failure. This vulnerability affects both unpackb(...

CVE-2026-114613 MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

CVE-2026-114613

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

CVE-2026-114613 MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

CVE-2026-114613 MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

PT-2026-121510

Name of the Vulnerable Software and Affected Versions msgpack-python versions prior to 1.2.3 Description The msgpack-python C extension msgpack. cmsgpack leaks a decoded map value during deserialization when a key is rejected while strict map key is set to True. This can lead to unbounded process...

PT-2026-135074

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack. cmsgpack leaks a decoded map value when deserialization rejects a key with strict map key=True the default. Repeated malformed inputs can cause unbounded process memory...

Red Hat: CVE-2026-114613: msgpack: msgpack: Denial of Service via memory leak during map deserialization

MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth...

aam-annotator (0.1.0), adarnauth-esi (>=1.4.1, <=1.4.14) +322 more potentially affected by CVE-2026-57585 via msgpack-python (>=0.4.2, <=0.5.6)

msgpack-python PYPI version =0.4.2, =1.4.1, =1.0.0, =0.9.1, =1.0.0, =0.0.3, =0.1.2, =2.0.0b2, =0.2.0, =0.1.0, =1.0.0, =0.0.1, =0.2.0 - arxlang 0.2.0 and more Source cves: CVE-2026-57585 Source advisory: MEND:CVE-2026-57585...

Use After Free

Overview msgpack is an efficient binary serialization format. Affected versions of this package are vulnerable to Use After Free in the unpacker' when it is reused after an error has occurred. An attacker can cause a crash or denial of service by repeatedly triggering errors and reusing the same...

PT-2026-135974

Уязвимость библиотеки Python для сериализации данных в формате MessagePack msgpack-python связана с недостаточным контролем ресурса в период его существования. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании...