high7.5
CVE-2026-106972
Uncontrolled recursion in MessagePack\BufferUnpacker::unpack() in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service throug…
Impact
Uncontrolled recursion in MessagePack\BufferUnpacker::unpack() in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service through memory exhaustion when an application decodes deeply nested, attacker-controlled MessagePack input.
Affected products
| Product | Affected versions |
|---|---|
| Rybakit/Msgpack | before 0.11.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.