Known vulnerabilities in msgpack5

Vendor: mcollina
Software: msgpack5
Software CPE: cpe:2.3:a:Matteo Collina:msgpack5:*:*:*:*:*:*:*:*
Website: https://github.com/mcollina
Total vulnerabilities: 8
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting msgpack5 msgpack5 is affected by 8 known vulnerabilities: 7 medium, 1 low Critical High Medium Low

Vulnerabilities (8)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU152783 - Out-of-bounds read
 CWE-125 Medium
No
No
 6.1.0 29.09.2026 SB2026092944
#VU152782 - Uncontrolled Recursion
 CWE-674 Medium
No
No
 6.1.0 29.09.2026 SB2026092944
#VU152781 - Improper Handling of Syntactically Invalid Structure
 CWE-228 Medium
No
No
 6.1.0 29.09.2026 SB2026092944
#VU152780 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
 CWE-1321 Medium
No
No
 6.1.0 29.09.2026 SB2026092944
#VU152779 - Uncontrolled Recursion
 CWE-674 Medium
No
No
 6.1.0 29.09.2026 SB2026092944
#VU152778 - Inefficient Algorithmic Complexity
 CWE-407 Medium
No
No
 6.1.0 29.09.2026 SB2026092944
#VU152777 - Modification of Assumed-Immutable Data
 CWE-471 Low
No
No
 6.1.0 29.09.2026 SB2026092944
#VU76823 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2021-21368		 CWE-1321 Medium
No
No
 3.6.1, 4.5.1, 5.2.1 02.06.2023 SB2021031224
SB2021122243