VYPR

Messagepack

by Nuget

CVEs (1)

  • CVE-2026-48506HigJun 22, 2026
    risk 0.49cvss 7.5epss 0.00

    MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, MessagePackReader.TrySkip() recursively descends into nested arrays and maps without incrementing the reader depth or calling the configured depth checks. This bypasses…