msgpack5 vulnerabilities — 8 matching vulnerabilities
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.
| Severity | Vulnerability | Package | Ecosystem | Disclosed | Fixed version |
|---|---|---|---|---|---|
| 7.5 high | CVE-2026-107302: msgpack5 - Out-of-Bounds Read Due to Truncated map32 Header |
msgpack5
|
npm | 08 Oct 2026 | 6.1.0 |
| 7.5 high | CVE-2026-107300: msgpack5 Package Stack Exhaustion Vulnerability |
msgpack5
|
npm | 08 Oct 2026 | 6.1.0 |
| 5.9 medium | CVE-2026-107299: msgpack5 Unbounded Stream Buffering Due to Reserved Byte Handling |
msgpack5
|
npm | 08 Oct 2026 | 6.1.0 |
| 6.5 medium | CVE-2026-107301: msgpack5 Prototype Protection Bypass Vulnerability |
msgpack5
|
npm | 08 Oct 2026 | 6.1.0 |
| 5.3 medium | CVE-2026-107298: msgpack5 Vulnerability Allows Deeply Nested Input to Exhaust Decoder Stack |
msgpack5
|
npm | 08 Oct 2026 | 6.1.0 |
| 5.9 medium | CVE-2026-107297: msgpack5 Quadratic Parsing Vulnerability in Streaming Decoder |
msgpack5
|
npm | 08 Oct 2026 | 6.1.0 |
| 3.7 low | CVE-2026-107296: msgpack5 Package Buffer Mutation Vulnerability |
msgpack5
|
npm | 08 Oct 2026 | 6.1.0 |
| 6.7 medium | CVE-2021-21368: Prototype Poisoning in msgpack5 |
msgpack5
|
npm | 12 Mar 2021 | 3.6.1 |
Questions
Searching the database
How do I search for a CVE or a package?
Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.
Can I filter by severity or by whether a fix exists?
Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.
What does "No fix published" mean?
No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.