critical9.8
CVE-2021-23410
Deserialization of Untrusted Data in msgpack
Impact
# Withdrawn This advisory was withdrawn by its CNA (Snyk). ## Original advisory All versions of package `msgpack` are vulnerable to Deserialization of Untrusted Data via the unpack function. This does not affect the similarly named package `@msgpack/msgpack`.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| npm | msgpack | <= 1.0.3 | none recorded |