Unrated severityNVD Advisory· Published Oct 28, 2026· Updated Oct 28, 2026

CVE-2026-106972

Description

An uncontrolled recursion in the MessagePack\BufferUnpacker::unpack() component of rybakit/msgpack v0.11.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Rybakit/msgpack.phpllm-create
Range: =0.11.0

Patches

Vulnerability mechanics

References

github.com/diptendukar/security-advisories/blob/main/CVE-2026-106972.mdnvd
github.com/rybakit/msgpack.php/releases/tag/v0.11.0nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000