PkgSeer

Vulnerabilities

Last updated 44 minutes ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
messagepack MessagePack: Nested arrays can blow past buffer length limits Medium Risk 5.3 3 hours ago 3 hours ago
microsoft.aspnetcore.signalr.protocols.messagepack Microsoft Security Advisory CVE-2026-92707 - ASP.NET Core Denial of Service Vulnerability Medium Risk 5.3 2 days ago 2 days ago
microsoft.aspnetcore.signalr.protocols.messagepack Microsoft Security Advisory CVE-2026-45591 – ASP.NET Core Denial of Service Vulnerability High Risk 7.5 4 months ago 1 month ago
messagepack MessagePack's LZ4 decompression may fail with AccessViolationException after dereferencing memory from bad input High Risk 8.2 4 months ago 1 month ago
messagepack MessagePack allows untrusted data to lead to DoS attack due to hash collisions and stack overflow Medium Risk 6.0 1 year ago 1 month ago
messagepack Untrusted data can lead to DoS attack due to hash collisions and stack overflow in MessagePack Medium Risk 4.8 6 years ago 1 month ago
messagepack.immutablecollection Untrusted data can lead to DoS attack due to hash collisions and stack overflow in MessagePack Medium Risk 4.8 6 years ago 1 month ago
messagepack.reactiveproperty Untrusted data can lead to DoS attack due to hash collisions and stack overflow in MessagePack Medium Risk 4.8 6 years ago 1 month ago
messagepack.unity Untrusted data can lead to DoS attack due to hash collisions and stack overflow in MessagePack Medium Risk 4.8 6 years ago 1 month ago
messagepack.unityshims Untrusted data can lead to DoS attack due to hash collisions and stack overflow in MessagePack Medium Risk 4.8 6 years ago 1 month ago
messagepack MessagePack-CSharp: InterfaceLookupFormatter bypasses collision-resistant comparer settings Medium Risk 6.0 3 months ago 3 months ago
messagepack MessagePack-CSharp: Typeless deserialization type restrictions do not recurse into arrays or generic arguments Medium Risk 6.0 3 months ago 3 months ago
messagepack MessagePack-CSharp: Multi-dimensional array formatters allocate from unchecked dimensions Medium Risk 6.0 3 months ago 3 months ago
messagepack MessagePack-CSharp: Unity unsafe blit formatter allocates from unbounded byte length Medium Risk 6.0 3 months ago 3 months ago
messagepack MessagePack-CSharp: DynamicUnionResolver-generated deserializers miss depth enforcement Medium Risk 6.0 3 months ago 3 months ago
messagepack MessagePack-CSharp: JSON conversion APIs can recurse without consistent depth enforcement Medium Risk 6.0 3 months ago 3 months ago
messagepack MessagePack-CSharp: ExpandoObject formatter can perform quadratic insertion work on untrusted maps High Risk 7.5 3 months ago 3 months ago
messagepack MessagePack-CSharp: ASP.NET Core MessagePackInputFormatter defaults to TrustedData for HTTP request bodies Medium Risk 6.0 3 months ago 3 months ago
messagepack MessagePack-CSharp: LZ4 decompression allocates from unbounded declared output lengths High Risk 7.5 3 months ago 3 months ago
messagepack MessagePack-CSharp: MessagePackReader.Skip can recurse without enforcing maximum object graph depth High Risk 7.5 3 months ago 3 months ago
messagepack MessagePack-CSharp: Denial of service vulnerabilities can swamp the CPU or crash the process with stack and heap overflows High Risk 8.0 3 months ago 3 months ago
nerdbank.messagepack Nerdbank.MessagePack has Inefficient CPU Computation Medium Risk 5.3 4 months ago 4 months ago
nerdbank.messagepack Nerdbank.MessagePack has a memory amplification DoS in collection deserialization Medium Risk 5.3 4 months ago 4 months ago
nerdbank.messagepack Nerdbank.MessagePack: Attacker-controlled stackalloc in DateTime decoding causes process-terminating StackOverflowException High Risk 7.5 5 months ago 5 months ago
microsoft.aspnetcore.signalr.protocols.messagepack Denial of service in ASP.NET Core High Risk 7.5 4 years ago 1 year ago
messagepack-rs Use of Uninitialized Resource in messagepack-rs. Critical 9.8 4 years ago 2 years ago
messagepack-rs Use of Uninitialized Resource in messagepack-rs. Critical 9.8 4 years ago 2 years ago
messagepack-rs Use of Uninitialized Resource in messagepack-rs Critical 9.8 4 years ago 2 years ago
messagepack-rs Deserialization functions pass uninitialized memory to user-provided Read High Risk 8.0 4 years ago 2 years ago
messagepack-rs Use of Uninitialized Resource in messagepack-rs. Critical 9.8 4 years ago 2 years ago
messagepack-rs Deserialization functions pass uninitialized memory to user-provided Read Unknown 5 years ago 2 years ago
Data courtesy of OSV.dev
Page 1