Mcollina vulnerabilities
We track 2 vulnerabilities in Mcollina products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 8, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Mcollina vulnerabilities
- 7.5 High severity
msgpack5: Out-of-bounds Read
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder reads the four-byte length of a map32 value before validating that the complete five-byte header is available. A truncated map32 header therefore causes a checked
- 7.5 High severity
msgpack5: Uncontrolled Recursion
msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder recursively invokes itself for each complete MessagePack value remaining in a chunk. A remote peer can send one chunk containing many small valid values,