Log in Start free

msgpack

Products

ProductCVEsExploitedLatest
msgpack-java3–Sep 12, 2026
msgpack-python2–Oct 22, 2026
msgpack-c1–Aug 20, 2026
msgpack-ruby1–Jul 30, 2026

Exploited and recent CVEs

  • CVE-2026-114613 High 7.5 MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure 0.5%
  • CVE-2026-90473 Medium 5.3 msgpack-java through 0.9.12 Integer Overflow via MAP32 0.4%
  • CVE-2026-90472 Medium 5.3 msgpack-java through 0.9.12 Stack Overflow via Nested Arrays 0.6%
  • CVE-2026-72854 Medium 5.3 msgpack-c Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation 0.2%
  • CVE-2026-54522 Low 2.1 MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure 0.2%
  • CVE-2026-57585 High 7.5 MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error 0.5%
  • CVE-2026-21452 High 7.5 MessagePack-Java Vulnerable to Remote Denial of Service via Malicious .msgpack Model File Triggering Unbounded EXT Payload Allocation 0.6%