github.com/shamaton/msgpack

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.5

CVE-2026-32284

Denial of service in github.com/shamaton/msgpack

The msgpack decoder fails to properly validate the input buffer length when processing truncated fixext data (format codes 0xd4-0xd8). This can lead to an out-of-bounds read and a runtime panic, allowing a denial of service attack.

github.com/shamaton/msgpack/v2 github.com/shamaton/msgpack github.com/shamaton/msgpack/v3 github.com/shamaton/msgpack/v2 Go

Mar 26, 2026