https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 11:43:08 +0000 https://cve.radiocsirt.org/vuln/cve-2026-48516 <p><strong>Affected:</strong> MessagePack-CSharp</p> <p>MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, InterfaceLookupFormatter&lt;TKey,TElement&gt; constructs an internal Dictionary&lt;TKey, IGrouping&lt;TKey,TElement&gt;&gt; with the default equality comparer instead of the security-aware comparer supplied by options.Security.GetEqualityComparer&lt;TKey&gt;(). This formatter omission allows hash-collision CPU denial of service against ILookup&lt;TKey,TElement&gt; even when the application has opted into the untrusted-data security posture This vulnerability is fixed in 2.5.301 and 3.1.7.</p> <p><strong>Affected:</strong> MessagePack-CSharp</p> <p>MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, InterfaceLookupFormatter&lt;TKey,TElement&gt; constructs an internal Dictionary&lt;TKey, IGrouping&lt;TKey,TElement&gt;&gt; with the default equality comparer instead of the security-aware comparer supplied by options.Security.GetEqualityComparer&lt;TKey&gt;(). This formatter omission allows hash-collision CPU denial of service against ILookup&lt;TKey,TElement&gt; even when the application has opted into the untrusted-data security posture This vulnerability is fixed in 2.5.301 and 3.1.7.</p> https://cve.radiocsirt.org/vuln/cve-2026-48516