Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/06/25 9:22 p.m.•23 views

MessagePack-CSharp: DynamicUnionResolver-generated deserializers miss depth enforcement

Summary Runtime-generated union deserializers emitted by DynamicUnionResolver do not call MessagePackSecurity.DepthStepref reader and do not decrement reader.Depth around recursive deserialization and skip paths. This means union deserialization does not consistently participate in the maximum...

7.5CVSS5.7AI score0.00405EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder