Github.com/shamaton/msgpack vulnerabilities
We track 1 vulnerability in Github.com/shamaton/msgpack products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 26, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Github.com/shamaton/msgpack vulnerabilities
- 7.5 High severity
github.com/shamaton/msgpack: Out-of-bounds Read
The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data (format codes 0xd4-0xd8). This can lead to an out-of-bounds read and a runtime panic, allowing a denial of service attack.