Search Results (2 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-106971 1 Rybakit 1 Msgpack.php 2026-11-10 7.5 High
An integer overflow in the MessagePack\BufferUnpacker component of rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service via crafted MessagePack input when the application runs on 32-bit PHP
CVE-2026-106972 1 Rybakit 1 Msgpack.php 2026-10-30 7.5 High
Uncontrolled recursion in MessagePack\BufferUnpacker::unpack() in rybakit/msgpack versions prior to 0.11.0 allows attackers to cause a denial of service through memory exhaustion when an application decodes deeply nested, attacker-controlled MessagePack input.