Vendor
Msgpack
8 known vulnerabilities in products by Msgpack, 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-114613 | MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure | 7.5 | |
| High | CVE-2026-126366 | Msgpack-ruby: Allocation of Resources Without Limits or Throttling | 7.5 | |
| Medium | CVE-2026-90472 | msgpack-java through 0.9.12 Stack Overflow via Nested Arrays | 5.3 | |
| High | CVE-2026-57585 | MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error | 7.5 | |
| High | CVE-2026-21452 | Msgpack-java: Memory Allocation with Excessive Size Value | 7.5 | |
| Medium | CVE-2026-90473 | msgpack-java through 0.9.12 Integer Overflow via MAP32 | 5.3 | |
| Medium | CVE-2026-72854 | Msgpack-c: Integer Overflow or Wraparound | 5.3 | |
| Medium | CVE-2026-54522 | MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure | 5.4 |
Products
| Msgpack-java | 3 | 0 |
| msgpack MessagePack (msgpack-ruby) | 3 | 0 |