messagepack kayıtları
messagepack üreticisine ait 14 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %100
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-674 Uncontrolled Recursion3
- CWE-770 Allocation of Resources Without Limits or Throttling2
- CWE-407 Inefficient Algorithmic Complexity2
- CWE-20 Improper Input Validation1
- CWE-328 Use of Weak Hash1
- CWE-1188 Initialization of a Resource with an Insecure Default1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
14 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
34İzleyin | CVE-2024-48924İstismar yok | MessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflowmessagepack-csharp · messagepack-csharp · CWE-328 | Yüksek8,7 | — | %0,4 | 17 Eki 2024 |
32İzleyin | CVE-2026-48109İstismar yok | MessagePack-CSharp: LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad inputmessagepack · messagepack · CWE-20 | Yüksek8,2 | — | %0,5 | 22 Haz 2026 |
32İzleyin | CVE-2026-48502İstismar yok | MessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflowsmessagepack · messagepack · CWE-125 | Yüksek8,2 | — | %0,4 | 22 Haz 2026 |
30İzleyin | CVE-2026-48506İstismar yok | MessagePack-CSharp: MessagePackReader.Skip can recurse without enforcing maximum object graph depthmessagepack · messagepack · CWE-674 | Yüksek7,5 | — | %0,5 | 22 Haz 2026 |
26İzleyin | CVE-2020-5234İstismar yok | Untrusted data can lead to DoS attack in MessagePack for C# and Unitymessagepack · messagepack · CWE-121 | Orta6,5 | — | %1,6 | 31 Oca 2020 |
25İzleyin | CVE-2026-48509İstismar yok | MessagePack-CSharp: ASP.NET Core MessagePackInputFormatter defaults to TrustedData for HTTP request bodiesmessagepack · messagepack · CWE-1188 | Orta6,3 | — | %0,4 | 22 Haz 2026 |
25İzleyin | CVE-2026-48516İstismar yok | MessagePack-CSharp: InterfaceLookupFormatter bypasses collision-resistant comparer settingsmessagepack · messagepack · CWE-407 | Orta6,3 | — | %0,4 | 22 Haz 2026 |
25İzleyin | CVE-2026-48511İstismar yok | MessagePack-CSharp: ExpandoObject formatter can perform quadratic insertion work on untrusted mapsmessagepack · messagepack · CWE-407 | Orta6,3 | — | %0,4 | 22 Haz 2026 |
25İzleyin | CVE-2026-48510İstismar yok | MessagePack-CSharp: LZ4 decompression allocates from unbounded declared output lengthsmessagepack · messagepack · CWE-409 | Orta6,3 | — | %0,4 | 22 Haz 2026 |
25İzleyin | CVE-2026-48512İstismar yok | MessagePack-CSharp: JSON conversion APIs can recurse without consistent depth enforcementmessagepack · messagepack · CWE-674 | Orta6,3 | — | %0,4 | 22 Haz 2026 |
25İzleyin | CVE-2026-48513İstismar yok | MessagePack-CSharp: DynamicUnionResolver generated deserializers miss depth enforcementmessagepack · messagepack · CWE-674 | Orta6,3 | — | %0,4 | 22 Haz 2026 |
25İzleyin | CVE-2026-48514İstismar yok | MessagePack-CSharp: Unity unsafe blit formatter allocates from unbounded byte lengthmessagepack · messagepack · CWE-770 | Orta6,3 | — | %0,4 | 22 Haz 2026 |
25İzleyin | CVE-2026-48515İstismar yok | MessagePack-CSharp: Multi-dimensional array formatters allocate from unchecked dimensionsmessagepack · messagepack · CWE-770 | Orta6,3 | — | %0,4 | 22 Haz 2026 |
25İzleyin | CVE-2026-48517İstismar yok | MessagePack-CSharp: Typeless deserialization type restrictions do not recurse into arrays or generic argumentsmessagepack · messagepack · CWE-470 | Orta6,3 | — | %0,3 | 22 Haz 2026 |
- CVE-2024-4892434İzleyin
MessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflow
YüksekCVSS 8,7İstismar yokEPSS %0messagepack-csharp · messagepack-csharp17 Eki 2024
- CVE-2026-4810932İzleyin
MessagePack-CSharp: LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad input
YüksekCVSS 8,2İstismar yokEPSS %1messagepack · messagepack22 Haz 2026
- CVE-2026-4850232İzleyin
MessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflows
YüksekCVSS 8,2İstismar yokEPSS %0messagepack · messagepack22 Haz 2026
- CVE-2026-4850630İzleyin
MessagePack-CSharp: MessagePackReader.Skip can recurse without enforcing maximum object graph depth
YüksekCVSS 7,5İstismar yokEPSS %0messagepack · messagepack22 Haz 2026
- CVE-2020-523426İzleyin
Untrusted data can lead to DoS attack in MessagePack for C# and Unity
OrtaCVSS 6,5İstismar yokEPSS %2messagepack · messagepack31 Oca 2020
- CVE-2026-4850925İzleyin
MessagePack-CSharp: ASP.NET Core MessagePackInputFormatter defaults to TrustedData for HTTP request bodies
OrtaCVSS 6,3İstismar yokEPSS %0messagepack · messagepack22 Haz 2026
- CVE-2026-4851625İzleyin
MessagePack-CSharp: InterfaceLookupFormatter bypasses collision-resistant comparer settings
OrtaCVSS 6,3İstismar yokEPSS %0messagepack · messagepack22 Haz 2026
- CVE-2026-4851125İzleyin
MessagePack-CSharp: ExpandoObject formatter can perform quadratic insertion work on untrusted maps
OrtaCVSS 6,3İstismar yokEPSS %0messagepack · messagepack22 Haz 2026
- CVE-2026-4851025İzleyin
MessagePack-CSharp: LZ4 decompression allocates from unbounded declared output lengths
OrtaCVSS 6,3İstismar yokEPSS %0messagepack · messagepack22 Haz 2026
- CVE-2026-4851225İzleyin
MessagePack-CSharp: JSON conversion APIs can recurse without consistent depth enforcement
OrtaCVSS 6,3İstismar yokEPSS %0messagepack · messagepack22 Haz 2026
- CVE-2026-4851325İzleyin
MessagePack-CSharp: DynamicUnionResolver generated deserializers miss depth enforcement
OrtaCVSS 6,3İstismar yokEPSS %0messagepack · messagepack22 Haz 2026
- CVE-2026-4851425İzleyin
MessagePack-CSharp: Unity unsafe blit formatter allocates from unbounded byte length
OrtaCVSS 6,3İstismar yokEPSS %0messagepack · messagepack22 Haz 2026
- CVE-2026-4851525İzleyin
MessagePack-CSharp: Multi-dimensional array formatters allocate from unchecked dimensions
OrtaCVSS 6,3İstismar yokEPSS %0messagepack · messagepack22 Haz 2026
- CVE-2026-4851725İzleyin
MessagePack-CSharp: Typeless deserialization type restrictions do not recurse into arrays or generic arguments
OrtaCVSS 6,3İstismar yokEPSS %0messagepack · messagepack22 Haz 2026