msgpack-java vulnerabilities

1 known vulnerability in msgpack-java from Msgpack. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  msgpack-java: Uncontrolled Resource Consumption

  CVE-2026-21452Jan 2, 2026Msgpack

  MessagePack for Java is a serializer implementation for Java. A denial-of-service vulnerability exists in versions prior to 0.9.11 when deserializing .msgpack files containing EXT32 objects with attacker-controlled payload lengths. While MessagePack-Java parse