https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 21:08:08 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-329176 EUVD-2026-329176 https://cve.radiocsirt.org/vuln/euvd-2026-329176 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48506 <p>MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, MessagePackReader.TrySkip() recursively descends into nested arrays and maps without incrementing the reader depth or calling the configured depth checks. This bypasses MessagePackSecurity.MaximumObjectGraphDepth, the library&#39;s documented protection against deeply nested object graphs. Many generated and dynamic formatters call reader.Skip() when they encounter unknown map keys, unknown array members, ignored fields, or data that should be skipped for forward compatibility. A deeply nested value in one of these skipped positions can therefore cause unbounded recursion and an uncatchable StackOverflowException. This vulnerability is fixed in 2.5.301 and 3.1.7.</p> <p>MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, MessagePackReader.TrySkip() recursively descends into nested arrays and maps without incrementing the reader depth or calling the configured depth checks. This bypasses MessagePackSecurity.MaximumObjectGraphDepth, the library&#39;s documented protection against deeply nested object graphs. Many generated and dynamic formatters call reader.Skip() when they encounter unknown map keys, unknown array members, ignored fields, or data that should be skipped for forward compatibility. A deeply nested value in one of these skipped positions can therefore cause unbounded recursion and an uncatchable StackOverflowException. This vulnerability is fixed in 2.5.301 and 3.1.7.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-48506 https://cve.radiocsirt.org/vuln/ghsa-vh6j-jc39-fggf <p><strong>Affected:</strong> NuGet: MessagePack</p> <p>## Summary</p> <p>`MessagePackReader.TrySkip()` recursively descends into nested arrays and maps without incrementing the reader depth or calling the configured depth checks. This bypasses `MessagePackSecurity.MaximumObjectGraphDepth`, the library&#39;s documented protection against deeply nested object graphs.</p> <p>Many generated and dynamic formatters call `reader.Skip()` when they encounter unknown map keys, unknown array members, ignored fields, or data that should be skipped for forward compatibility. A deeply nested value in one of these skipped positions can therefore cause unbounded recursion and an uncatchable `StackOverflowException`.</p> <p>## Impact</p> <p>Applications that deserialize untrusted MessagePack payloads are affected when a formatter skips attacker-controlled values. This is a broad deserialization path and can be reached during normal object deserialization when an input includes an unknown member or extra value.</p> <p>The attacker does not need to target a special resolver or compression mode. A payload containing many nested single-element arrays or maps in a skipped location can exhaust the process stack. Because `StackOverflowException` is not catchable in normal .NET execution, this terminates the host process and can deny service to other users of the same process.</p> <p>`MessagePackSecurity.UntrustedData` does not mitigate this issue because the skip path does not participate in depth accounting.</p> <p>## Affected components</p> <p>- Package: `MessagePack` - APIs: `MessagePackReader.Skip`,…</p> <p><strong>Affected:</strong> NuGet: MessagePack</p> <p>## Summary</p> <p>`MessagePackReader.TrySkip()` recursively descends into nested arrays and maps without incrementing the reader depth or calling the configured depth checks. This bypasses `MessagePackSecurity.MaximumObjectGraphDepth`, the library&#39;s documented protection against deeply nested object graphs.</p> <p>Many generated and dynamic formatters call `reader.Skip()` when they encounter unknown map keys, unknown array members, ignored fields, or data that should be skipped for forward compatibility. A deeply nested value in one of these skipped positions can therefore cause unbounded recursion and an uncatchable `StackOverflowException`.</p> <p>## Impact</p> <p>Applications that deserialize untrusted MessagePack payloads are affected when a formatter skips attacker-controlled values. This is a broad deserialization path and can be reached during normal object deserialization when an input includes an unknown member or extra value.</p> <p>The attacker does not need to target a special resolver or compression mode. A payload containing many nested single-element arrays or maps in a skipped location can exhaust the process stack. Because `StackOverflowException` is not catchable in normal .NET execution, this terminates the host process and can deny service to other users of the same process.</p> <p>`MessagePackSecurity.UntrustedData` does not mitigate this issue because the skip path does not participate in depth accounting.</p> <p>## Affected components</p> <p>- Package: `MessagePack` - APIs: `MessagePackReader.Skip`,…</p> https://cve.radiocsirt.org/vuln/ghsa-vh6j-jc39-fggf