Mcollina

9 CVEs in 2 Mcollina products, including Msgpack5, Mcp-Ripgrep. Newest: CVE-2026-113378 (2026-10-20). Severity, EPSS and public exploits for each.

Mcollina products with known CVEs

ProductCVEs
Msgpack58
Mcp-Ripgrep1
Mcollina CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-113378Medium5.32026-10-20A security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the component Advanced Sea…
CVE-2026-107302High7.52026-10-08msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder reads the four-byte length of a map32 value before validating…
CVE-2026-107301Medium6.52026-10-08msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, constructing msgpack5 with an empty or partial options object disables the…
CVE-2026-107300High7.52026-10-08msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder recursively invokes itself for each complete Message…
CVE-2026-107299Medium5.92026-10-08msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder treats the reserved MessagePack byte 0xc1 as incompl…
CVE-2026-107298Medium5.32026-10-08msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit, allowing an…
CVE-2026-107297Medium5.92026-10-08msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder reparses an incomplete array or map from the beginni…
CVE-2026-107296Low3.72026-10-08msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a negative signed 64-bit integer modifies the corresponding bytes…
CVE-2021-21368Medium6.72021-03-12msgpack5 is a msgpack v5 implementation for node.js and the browser. In msgpack5 before versions 3.6.1, 4.5.1, and 5.2.1 there is a "Prototype Poisoning" vulne…