All products

msgpack

RubyGems · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
msgpack-ruby JRuby decoder makes uncapped header-count allocations; a 5-byte message forces multi-GiB OOMCVE-2026-126366 · GHSA-73V3-WF97-VPGJ msgpack RubyGems High Fix reported
MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer DisclosureCVE-2026-54522 · GHSA-4MRV-5P47-P938 msgpack RubyGems Low Fix reported