https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:07:45.986820+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-375055 EUVD-2026-375055 2026-10-03T04:07:46.048691+00:00 EUVD-2026-375055 https://cve.radiocsirt.org/vuln/fkie_cve-2026-90472 fkie_cve-2026-90472 2026-10-03T04:07:46.048728+00:00

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger StackOverflowError, causing per-request deserialization failures.

 https://cve.radiocsirt.org/vuln/ghsa-h5hr-vppv-v9cg GHSA-h5hr-vppv-v9cg 2026-10-03T04:07:46.048763+00:00

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger StackOverflowError, causing per-request deserialization failures.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-90472 UBUNTU-CVE-2026-90472 2026-10-03T04:07:46.048781+00:00

Affected: Ubuntu:20.04:LTS: msgpack-java, Ubuntu:22.04:LTS: msgpack-java, Ubuntu:24.04:LTS: msgpack-java, Ubuntu:26.04:LTS: msgpack-java

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger StackOverflowError, causing per-request deserialization failures.