messagepack

License

(BSD-2-Clause OR MIT)[0.1.0-beta,2.0.110-alpha);

MIT[2.0.110-alpha,);

Known vulnerabilities in the messagepack package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
M Insecure Default Initialization of Resource	[,2.5.301)[3.0,3.1.7)
H Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')	[3.0,3.1.7)
M Deserialization of Untrusted Data	[,2.5.301)[3.0,3.1.7)
M Inefficient Algorithmic Complexity	[,2.5.301)[3.0,3.1.7)
M Allocation of Resources Without Limits or Throttling	[,2.5.301)[3.0,3.1.7)
M Uncontrolled Recursion	[,2.5.301)[3.0,3.1.7)
M Allocation of Resources Without Limits or Throttling	[,2.5.301)[3.0,3.1.7)
M Inefficient Algorithmic Complexity	[,2.5.301)[3.0,3.1.7)
M Uncontrolled Recursion	[,2.5.301)[3.0,3.1.7)
H Uncontrolled Recursion	[,2.5.301)[3.0,3.1.7)
M Allocation of Resources Without Limits or Throttling	[,2.5.301)[3.0,3.1.7)
H Out-of-bounds Read	[,2.5.301)[3.0.54-alpha,3.1.7)
M Use of Weak Hash	[,2.5.187)[2.6.95-alpha,3.0.214-rc.1)
M Denial of Service (DoS)	[,1.9.3)[2.0.0,2.1.80)