Skip to content
OpenAdvisories

Vendor

AArnott

1 known vulnerabilities.

Products

Nerdbank.MessagePack 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-44375

    Nerdbank.MessagePack: Attacker-controlled stackalloc in DateTime decoding causes process-terminating StackOverflowException

    Nerdbank.MessagePack is a NativeAOT-compatible MessagePack serialization library. Prior to 1.1.62, Nerdbank.MessagePack contains an uncontrolled stack allocation vulnerability in DateTime decoding. A malicious MessagePack payload can declare an oversized time…

    AArnott Nerdbank.MessagePack Nerdbank.MessagePack NuGet