[ Vendor · 8 CVEs ]
mcollina
CVEs affecting mcollina published in the last 30 days, plus any mcollina CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-113378 | 20 Oct 2026 | CVSS 5.3 | mcollina mcp-ripgrepA security flaw has been discovered in mcollina mcp-ripgrep up to 0.4.0. Affected is an unknown function of the file src/index.ts of the component… | |
| CVE-2026-107302 | 8 Oct 2026 | CVSS 7.5 | msgpack5: Truncated map32 headers throw an unexpected errormsgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the decoder reads the four-byte length of a map32 value before… | Fix |
| CVE-2026-107300 | 8 Oct 2026 | CVSS 7.5 | msgpack5: Many buffered values can exhaust the streaming decoder stackmsgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder recursively invokes itself for each… | Fix |
| CVE-2026-107301 | 8 Oct 2026 | CVSS 6.5 | msgpack5: Partial options disable prototype protectionmsgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, constructing msgpack5 with an empty or partial options object… | Fix |
| CVE-2026-107296 | 8 Oct 2026 | CVSS 3.7 | msgpack5: Decoding negative int64 values mutates the input buffermsgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, decoding a negative signed 64-bit integer modifies the… | Fix |
| CVE-2026-107297 | 8 Oct 2026 | CVSS 5.9 | msgpack5: Quadratic parsing in the streaming decodermsgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder reparses an incomplete array or map from… | Fix |
| CVE-2026-107298 | 8 Oct 2026 | CVSS 5.3 | msgpack5: Deeply nested input can exhaust the decoder stackmsgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the array and map decoding paths have no nesting-depth limit… | Fix |
| CVE-2026-107299 | 8 Oct 2026 | CVSS 5.9 | msgpack5: Reserved byte can cause unbounded stream bufferingmsgpack5 is a msgpack v5 implementation for node.js and the browser. Prior to 6.1.0, the streaming decoder treats the reserved MessagePack byte 0xc1… | Fix |