Repository navigation
Security: msgpack/msgpack-ruby
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
msgpack-java JRuby decoder allocates from declared header counts with no cap: 5-byte message forces multi-GiB OOMGHSA-73v3-wf97-vpgj published
Oct 30, 2026 by byrootHigh -
[DFVULN-839] Use-After-Free in MessagePack::Buffer#clear Enables Cross-Buffer DisclosureGHSA-4mrv-5p47-p938 published
Jun 9, 2026 by byrootLow
Learn more about advisories related to msgpack/msgpack-ruby in the GitHub Advisory Database