Skip to content
OpenAdvisories

Package · Wolfi

py3.15-pip-base

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-114613

    MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure

    MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension (msgpack._cmsgpack) leaks a decoded map value when deserialization rejects a key with strict_map_key=True (the default). Repeated malformed inp…

    msgpack msgpack-python py3-cassandra-medusa superset-6.0 Debian Azure Linux Wolfi PyPI