CVE-2026-92707 MessagePack-CSharp MessagePack-CSharp
MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.303 and 3.1.9, deserializing attacker-controlled MessagePack data as System.Object through PrimitiveObjectFormatter can cause excessive memory allocation. The formatter allocates an object[]…
- CVSS
- 5.3 Medium
- EPSS
- 0.7%
- Percentile
- 53
- Published
- 2026-10-15
- Force
- 4 of 12
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L