Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how messagepack compares to other vendors in security performance

View Risk Score →

MessagePack msgpack-pythonMessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error

Risk 43
Severity
7.5
First published (updated )
CVE-2026-57585

nuget/MessagePackMessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflows

Risk 41
Severity
8.2
First published (updated )
CVE-2026-48502

nuget/MessagePackMessagePack-CSharp: MessagePackReader.Skip can recurse without enforcing maximum object graph depth

Risk 43
Severity
7.5
First published (updated )
CVE-2026-48506

nuget/MessagePackMessagePack-CSharp: ASP.NET Core MessagePackInputFormatter defaults to TrustedData for HTTP request bodies

Risk 66
Severity
6.3
First published (updated )
CVE-2026-48509

nuget/MessagePackMessagePack-CSharp: LZ4 decompression allocates from unbounded declared output lengths

Risk 43
Severity
6.3
First published (updated )
CVE-2026-48510
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

nuget/MessagePackMessagePack-CSharp: ExpandoObject formatter can perform quadratic insertion work on untrusted maps

Risk 43
Severity
6.3
First published (updated )
CVE-2026-48511

nuget/MessagePackMessagePack-CSharp: JSON conversion APIs can recurse without consistent depth enforcement

Risk 43
Severity
6.3
First published (updated )
CVE-2026-48512

nuget/MessagePackMessagePack-CSharp: DynamicUnionResolver generated deserializers miss depth enforcement

Risk 43
Severity
6.3
First published (updated )
CVE-2026-48513

MessagePack Messagepack C\#MessagePack-CSharp: Unity unsafe blit formatter allocates from unbounded byte length

Risk 43
Severity
6.3
First published (updated )
CVE-2026-48514

nuget/MessagePackMessagePack-CSharp: Multi-dimensional array formatters allocate from unchecked dimensions

Risk 43
Severity
6.3
First published (updated )
CVE-2026-48515
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

nuget/MessagePackMessagePack-CSharp: InterfaceLookupFormatter bypasses collision-resistant comparer settings

Risk 43
Severity
6.3
First published (updated )
CVE-2026-48516

nuget/MessagePackMessagePack-CSharp: Typeless deserialization type restrictions do not recurse into arrays or generic arguments

Risk 43
Severity
6.3
First published (updated )
CVE-2026-48517

nuget/MessagePackMessagePack-CSharp: LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad input

Risk 54
Severity
8.2
First published (updated )
CVE-2026-48109

MessagePack Messagepack C\#Untrusted data can lead to DoS attack in MessagePack for C# and Unity

Risk 40
Severity
6.8
First published (updated )
CVE-2020-5234

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203