What’s Vulnerable › Products

msgpack Messagepack vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your msgpack Messagepack version is affected

Latest msgpack Messagepack vulnerabilities

• CVE-2026-54522 — MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure (CVSS 5.4)
• CVE-2026-57585 — MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error (CVSS 7.5)
• CVE-2026-21452 — MessagePack-Java Vulnerable to Remote Denial of Service via Malicious .msgpack Model File Triggering Unbounded EXT Payload Allocation (CVSS 7.5)