M
Vendor security profile
msgpack
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs6
Critical0
CISA KEV0
Public exploit4
Patch rate%33
Avg. CVSS6.6
12-month vulnerability rate
0
0
0
0
1
0
0
1
1
1
2
0
CVE KEV
CVE severity distribution
6toplam CVE
High2 (33%)
Medium4 (67%)
Patch and exploitation view
%33
Verified patch
%0
CISA KEV
%67
Public exploit
2Patch available
0Partial
0Workaround
0Vendor: no patch
4Unknown
Latest vulnerabilities
6.9
CVE-2026-90473
msgpack-java through 0.9.12 Integer Overflow via MAP32
M
Patch status unknownEPSS %0
6.9
CVE-2026-90472
msgpack-java through 0.9.12 Stack Overflow via Nested Arrays
M
Patch status unknownEPSS %1
5.3
CVE-2026-72854
msgpack-c Integer Overflow in msgpack_unpacker_expand_buffer Causes a False-Success Undersized Reservation
M
Patch status unknownEPSS %0
5.4
CVE-2026-54522
Use after free in Msgpack Messagepack
M
Patch verifiedEPSS %0
7.5
CVE-2026-57585
Use after free in Msgpack Messagepack
M
Patch verifiedEPSS %0
7.5
CVE-2026-32284
Denial of service in github.com/shamaton/msgpack
G
Patch status unknownEPSS %1