By vendor

Msgpack vulnerabilities

Known CVEs affecting Msgpack products, prioritized by severity, with SEC.co remediation and detection guidance.

1 published vulnerability

• CVE-2026-57585HIGH 7.5

  MessagePack, a popular serialization library for Python, contains a defect in how it handles repeated use of the Unpacker object after an error occurs. When an Unpacker instance encounters a parsing error and is then reused to process more data, it can read from invalid memory locations, causing the process to crash. This denial-of-service condition affects applications that parse untrusted MessagePack data in a loop or that implement retry logic without properly reinitializing the Unpacker. The vulnerability is resolved in version 1.2.1 and later.