NuGet/Nerdbank.MessagePack: medium 5.3
Nerdbank.MessagePack has a memory amplification DoS in collection deserialization
Action: Upgrade Nerdbank.MessagePack to 1.1.78 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.1.78 | - |
Fixed versions
| 1.1.78 |
Sources
- osv: GHSA-qjvr-435c-5fjh
- https://github.com/AArnott/Nerdbank.MessagePack/security/advisories/GHSA-qjvr-435c-5fjh
- https://github.com/AArnott/Nerdbank.MessagePack/commit/6f19387a3d1322aea880ce3f8db2cfd0de195e12
- https://github.com/AArnott/Nerdbank.MessagePack
published · modified · JSON