https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 09:06:05 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-375055 EUVD-2026-375055 https://cve.radiocsirt.org/vuln/euvd-2026-375055 https://cve.radiocsirt.org/vuln/fkie_cve-2026-90472 <p>msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread&#39;s stack and trigger StackOverflowError, causing per-request deserialization failures.</p> <p>msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread&#39;s stack and trigger StackOverflowError, causing per-request deserialization failures.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-90472 https://cve.radiocsirt.org/vuln/ghsa-h5hr-vppv-v9cg <p>msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread&#39;s stack and trigger StackOverflowError, causing per-request deserialization failures.</p> <p>msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread&#39;s stack and trigger StackOverflowError, causing per-request deserialization failures.</p> https://cve.radiocsirt.org/vuln/ghsa-h5hr-vppv-v9cg https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-90472 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: msgpack-java, Ubuntu:22.04:LTS: msgpack-java, Ubuntu:24.04:LTS: msgpack-java, Ubuntu:26.04:LTS: msgpack-java</p> <p>msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread&#39;s stack and trigger StackOverflowError, causing per-request deserialization failures.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: msgpack-java, Ubuntu:22.04:LTS: msgpack-java, Ubuntu:24.04:LTS: msgpack-java, Ubuntu:26.04:LTS: msgpack-java</p> <p>msgpack-java through 0.9.12 contains a stack overflow vulnerability in MessageUnpacker.unpackValue() that recursively deserializes arrays and maps without nesting depth limits. Attackers can craft payloads with deeply nested arrays to exhaust the deserializing thread&#39;s stack and trigger StackOverflowError, causing per-request deserialization failures.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-90472