Skip to content
OpenAdvisories

Package · npm

msgpackr

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.8
    CVE-2023-52079

    Conversion of property names to strings can trigger infinite recursion

    msgpackr is a fast MessagePack NodeJS/JavaScript implementation. Prior to 1.10.1, when decoding user supplied MessagePack messages, users can trigger stuck threads by crafting messages that keep the decoder stuck in a loop. The fix is available in v1.10.1. Ex…

    kriszyp msgpackr msgpackr npm