CVE-2026-21452
1 advisory.
Maven/org.msgpack:msgpack-core CVE-2026-21452: high 7.5
MessagePack for Java Vulnerable to Remote DoS via Malicious EXT Payload Allocation
Action: Upgrade org.msgpack:msgpack-core to 0.9.11 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.9.11 | - |
Fixed versions
| 0.9.11 |
Sources
- osv: GHSA-cw39-r4h6-8j3x
- https://github.com/msgpack/msgpack-java/security/advisories/GHSA-cw39-r4h6-8j3x
- https://nvd.nist.gov/vuln/detail/CVE-2026-21452
- https://github.com/msgpack/msgpack-java/commit/daa2ea6b2f11f500e22c70a22f689f7a9debdeae
- https://github.com/msgpack/msgpack-java
- https://github.com/msgpack/msgpack-java/releases/tag/v0.9.11
CVE-2026-21452 · published · modified · JSON