Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

nuget

MessagePack

nuget

Extremely Fast MessagePack(MsgPack) Serializer for C# (.NET Framework, .NET 6, Unity, Xamarin).

View on github.com · View on nuget.org

Security Advisories for MessagePack in nuget

Moderate
about 18 hours ago

MessagePack-CSharp: Typeless deserialization type restrictions do not recurse into arrays or generic arguments GSA_kwCzR0hTQS1xaG1mLXh3MjctNnJxcs4ABZhW

nuget MessagePack
Moderate
about 18 hours ago

MessagePack-CSharp: InterfaceLookupFormatter bypasses collision-resistant comparer settings GSA_kwCzR0hTQS1xMmg2LWdod20tNXFtOM4ABZhV

nuget MessagePack
Moderate
about 18 hours ago

MessagePack-CSharp: Multi-dimensional array formatters allocate from unchecked dimensions GSA_kwCzR0hTQS1jeG1qLTgzZ2gtZnA0Oc4ABZhU

nuget MessagePack
Moderate
about 18 hours ago

MessagePack-CSharp: Unity unsafe blit formatter allocates from unbounded byte length GSA_kwCzR0hTQS13NTY3LWdqcjItaG01as4ABZhT

nuget MessagePack
Moderate
about 18 hours ago

MessagePack-CSharp: DynamicUnionResolver-generated deserializers miss depth enforcement GSA_kwCzR0hTQS13ZnIzLXhqNzUtcGZ3aM4ABZhS

nuget MessagePack
Moderate
about 19 hours ago

MessagePack-CSharp: JSON conversion APIs can recurse without consistent depth enforcement GSA_kwCzR0hTQS1jajlnLTNtajItZzh2ds4ABZhR

nuget MessagePack
Moderate
about 20 hours ago

MessagePack-CSharp: ExpandoObject formatter can perform quadratic insertion work on untrusted maps GSA_kwCzR0hTQS0yeDgzLThnOTUteGg1Oc4ABZhQ

nuget MessagePack
Moderate
about 20 hours ago

MessagePack-CSharp: LZ4 decompression allocates from unbounded declared output lengths GSA_kwCzR0hTQS12NzJ4LTJoODYtN2Y4bc4ABZhO

nuget MessagePack
Moderate
about 20 hours ago

MessagePack-CSharp: ASP.NET Core MessagePackInputFormatter defaults to TrustedData for HTTP request bodies GSA_kwCzR0hTQS0yZjMzLXByOTctMjY1cc4ABZhN

nuget MessagePack
High
about 20 hours ago

MessagePack-CSharp: MessagePackReader.Skip can recurse without enforcing maximum object graph depth GSA_kwCzR0hTQS12aDZqLWpjMzktZmdnZs4ABZhL

nuget MessagePack
High
about 21 hours ago

MessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflows GSA_kwCzR0hTQS0zODJqLThteGgtYzd4Ms4ABZhI

nuget MessagePack
High
15 days ago

MessagePack's LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad input GSA_kwCzR0hTQS1odjhtLWpqOTUtd2czeM4ABYkn

nuget MessagePack
Moderate
over 1 year ago

MessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflow GSA_kwCzR0hTQS00cW00LThoZzItZzJ4bc4ABAZj

nuget MessagePack

Filter by Severity

Moderate 10 High 3