GHSA-jr77-8gx4-h5qh
MessagePack for Golang subject to DoS via Unmarshal panic
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/shamaton/msgpack/v2 | < 2.1.1 | 2.1.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
Unmarshal can panic on some inputs, possibly allowing for denial of service attacks. This issue has been patched in version 2.1.1.
References
External links from the advisory. They lead to third-party sites.