What’s Vulnerable › Products

msgpack-java vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your msgpack-java version is affected

Latest msgpack-java vulnerabilities

• CVE-2026-90473 — msgpack-java through 0.9.12 Integer Overflow via MAP32 (CVSS 5.3)
• CVE-2026-90472 — msgpack-java through 0.9.12 Stack Overflow via Nested Arrays (CVSS 5.3)