GitHub Advisory Database
Security vulnerability database inclusive of CVEs and GitHub originated security advisories from the world of open source software.
Filter advisories
GitHub reviewed advisories
Unreviewed advisories
Malware advisories
6 advisories
msgpack5: Decoding negative int64 values mutates the input buffer
Low
CVE-2026-107296
was published
for
msgpack5
(npm)
Oct 8, 2026
msgpack5: Quadratic parsing in the streaming decoder
Moderate
CVE-2026-107297
was published
for
msgpack5
(npm)
Oct 8, 2026
msgpack5: Deeply nested input can exhaust the decoder stack
Moderate
CVE-2026-107298
was published
for
msgpack5
(npm)
Oct 8, 2026
msgpack5: Reserved byte can cause unbounded stream buffering
Moderate
CVE-2026-107299
was published
for
msgpack5
(npm)
Oct 8, 2026
msgpack5: Many buffered values can exhaust the streaming decoder stack
High
CVE-2026-107300
was published
for
msgpack5
(npm)
Oct 8, 2026
msgpack5: Truncated map32 headers throw an unexpected error
High
CVE-2026-107302
was published
for
msgpack5
(npm)
Oct 8, 2026
ProTip!
Advisories are also available from the
GraphQL API