17 matches found
GHSA-J586-36CW-2GC2 MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure
Impact The msgpack-python C extension msgpack.cmsgpack leaks a decoded map value when deserialization rejects a key with strictmapkey=True the default. Repeated malformed inputs can cause unbounded process memory growth and denial of service in applications that deserialize attacker-controlled...
7.5CVSS5.7AI score0.0044EPSS
SaveExploits0References5
20