Lucene search
+L

1 matches found

Veracode
Veracode
•added 2026/10/28 5:56 p.m.•9 views

MessagePack: Unbounded Memory Leak In Msgpack C Extension On Strict_map_key Validation Failure

Impact The msgpack-python C extension "msgpack.cmsgpack" leaks a decoded map value when deserialization rejects a key with "strictmapkey=True" the default. Repeated malformed inputs can cause unbounded process memory growth and denial of service in applications that deserialize attacker-controlle...

7.5CVSS5.8AI score0.00543EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder