What’s Vulnerable › Products

mcollina msgpack5 vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your mcollina msgpack5 version is affected

Latest mcollina msgpack5 vulnerabilities

• CVE-2026-107302 — msgpack5: Truncated map32 headers throw an unexpected error (CVSS 7.5)
• CVE-2026-107301 — msgpack5: Partial options disable prototype protection (CVSS 6.5)
• CVE-2026-107300 — msgpack5: Many buffered values can exhaust the streaming decoder stack (CVSS 7.5)
• CVE-2026-107299 — msgpack5: Reserved byte can cause unbounded stream buffering (CVSS 5.9)
• CVE-2026-107298 — msgpack5: Deeply nested input can exhaust the decoder stack (CVSS 5.3)
• CVE-2026-107297 — msgpack5: Quadratic parsing in the streaming decoder (CVSS 5.9)
• CVE-2026-107296 — msgpack5: Decoding negative int64 values mutates the input buffer (CVSS 3.7)
• CVE-2021-21368 — Prototype poisoning (CVSS 8.8)