Skip to content
OpenAdvisories

Package · Debian

msgpack-java

3 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-90473

    msgpack-java through 0.9.12 Integer Overflow via MAP32

    msgpack-java through 0.9.12 contains an integer overflow vulnerability in MessageUnpacker.skipValue() when processing MAP32 containers with large element counts. Attackers can supply a MAP32 element count at or above 0x40000000 that wraps when doubled, causin…

    msgpack msgpack-java msgpack-java msgpack-java Debian Ubuntu
  • Medium 5.3
    CVE-2026-90472

    msgpack-java through 0.9.12 Stack Overflow via Nested Arrays

    msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializin…

    msgpack msgpack-java msgpack-java msgpack-java Debian Ubuntu