CVE-2026-54522
1 advisory.
RubyGems/msgpack CVE-2026-54522: low, EPSS 0.23%
MessagePack::Buffer#clear Use-After-Free that Enables Cross-Buffer Disclosure
Action: Upgrade msgpack to 1.8.2 or later.
bundle update msgpackAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.2 | - |
Fixed versions
| 1.8.2 |
Sources
- osv: GHSA-4mrv-5p47-p938
- https://github.com/msgpack/msgpack-ruby/security/advisories/GHSA-4mrv-5p47-p938
- https://github.com/msgpack/msgpack-ruby/commit/5627d71606b565641d2dd501b82aae862f4abe90
- https://github.com/msgpack/msgpack-ruby
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/msgpack/CVE-2026-54522.yml
- https://www.cve.org/CVERecord/SearchResults?query=CVE-2026-54522
CVE-2026-54522 · published · modified · JSON