Messagepack

    Dashboard / Vendors

    Products: 2
    Vulnerabilities: 14
    Known Exploited: 0
    0
    Critical Level Threats
    2
    High Level Threats
    1
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2026-48109

    MessagePack-CSharp: LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad input

    Last Modified: Jun 24, 2026
    Published: Jun 22, 2026

    CVE-2026-48502

    MessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflows

    Last Modified: Jun 24, 2026
    Published: Jun 22, 2026

    CVE-2026-48506

    MessagePack-CSharp: MessagePackReader.Skip can recurse without enforcing maximum object graph depth

    Last Modified: Jun 24, 2026
    Published: Jun 22, 2026

    CVE-2026-48509

    MessagePack-CSharp: ASP.NET Core MessagePackInputFormatter defaults to TrustedData for HTTP request bodies

    Last Modified: Jun 24, 2026
    Published: Jun 22, 2026

    CVE-2026-48510

    MessagePack-CSharp: LZ4 decompression allocates from unbounded declared output lengths

    Last Modified: Jun 24, 2026
    Published: Jun 22, 2026
    Items Per Page
    Messagepack Vulnerabilities & Security CVEs | CVE-DB