[ Vendor · 1 CVEs ]

MessagePack-CSharp

CVEs affecting MessagePack-CSharp published in the last 30 days, plus any MessagePack-CSharp CVE on CISA's exploited list.

CVEPublishedSeverityVulnerabilitySignals
CVE-2026-92707 15 Oct 2026 CVSS 5.3 MessagePack: Nested arrays can blow past buffer length limitsMessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as… Fix