Skip to content
OpenAdvisories

Package · npm

msgpack5

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2026-107296

    msgpack5: Decoding negative int64 values mutates the input buffer

    msgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a negative signed 64-bit integer modifies the corresponding bytes in the caller-provided input buffer while computing the value. Applications that retain or reuse en…

    mcollina msgpack5 msgpack5 npm