p PatchFirst

CVE-2026-106972

CVE-2026-106972

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An uncontrolled recursion in the MessagePack\BufferUnpacker::unpack() component of rybakit/msgpack v0.11.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

EPSS 0.2%

Published
Updated

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

Original sources

Check your server →