https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:31:20.872178+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-90472 CVE-2026-90472 — msgpack-java through 0.9.12 Stack Overflow via Nested Arrays 2026-10-07T10:31:20.888338+00:00

Affected: msgpack-java

msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread's stack and trigger StackOverflowError, causing per-request deserialization failures.