Skip to content
OpenAdvisories

Package · Debian

ruby-msgpack

1 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Feed

  • Low 2.1
    CVE-2026-54522

    MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure

    MessagePack for Ruby is an implementation of the MessagePack binary serialization format. Prior to 1.8.2, MessagePack::Buffer#clear in ext/msgpack/buffer.c leaves rmem_last, rmem_end, and rmem_owner stale after _msgpack_buffer_shift_chunk returns an rmem page…

    msgpack msgpack-ruby ruby-msgpack msgpack Debian Ubuntu RubyGems