Msgpack Messagepack
3 CVEs affecting Msgpack Messagepack. Latest disclosed: 2026-07-30. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-57585 | High | 7.5 | 2026-06-30 | MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.1, there is an Out-of-bounds read/crash on Unpacker reuse after a caught erro… |
CVE-2026-21452 | High | 7.5 | 2026-01-02 | MessagePack for Java is a serializer implementation for Java. A denial-of-service vulnerability exists in versions prior to 0.9.11 when deserializing .msgpack… |
CVE-2026-54522 | Medium | 5.4 | 2026-07-30 | MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1.8.2, MessagePack::Buffer#clear in ext/msgpack/buffer.c lea… |