Skip to content
OpenAdvisories

Product · msgpack

msgpack-python

2 known vulnerabilities.

All Critical High Medium Low Exploited only

2 results · Feed

  • High 7.5
    CVE-2026-114613

    MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failure

    MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.3, the msgpack-python C extension (msgpack._cmsgpack) leaks a decoded map value when deserialization rejects a key with strict_map_key=True (the default). Repeated malformed inp…

    msgpack msgpack-python msgpack python-msgpack Debian PyPI
  • High 7.5
    CVE-2026-57585

    MessagePack: Out-of-bounds read/crash on Unpacker reuse after caught error

    MessagePack is the serializer implementation for Python msgpack.org. Prior to 1.2.1, there is an Out-of-bounds read/crash on Unpacker reuse after a caught error, potentially leading to a DoS attack. If the Unpacker is used repeatedly after an error occurs, th…

    msgpack msgpack-python python-pip msgpack Debian Ubuntu PyPI