Skip to content
OpenAdvisories

Package · Ubuntu

msgpack-java

3 known vulnerabilities.

All Critical High Medium Low Exploited only

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-21452

    MessagePack-Java Vulnerable to Remote Denial of Service via Malicious .msgpack Model File Triggering Unbounded EXT Payload Allocation

    MessagePack for Java is a serializer implementation for Java. A denial-of-service vulnerability exists in versions prior to 0.9.11 when deserializing .msgpack files containing EXT32 objects with attacker-controlled payload lengths. While MessagePack-Java pars…

    msgpack msgpack-java msgpack-java msgpack-java Debian Ubuntu Maven