Threats affecting pkg:maven/libmspack/libmspack

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.3	EPSS 0.3%	CVE-2026-119602Microsoft · libmspack through 0.11alpha Uninitialized Memory Disclosure via MS-ZIP Decompressor Window Medium6.3EPSS 0.3%2026-11-05GCVE DatabaseCVE-2026-119602 CVE-2026-119602 is a vulnerability in libmspack version 3.0 involving uninitialized memory disclosure through the MS-ZIP decompressor window. This flaw could potentially expose sensitive memory contents during decompression operations. EPSS 0.3%Report on CVE-2026-119602 Vulnerability Microsoft Security Response Center CWE-908 #microsoft-security-response-ce	GCVE Database	2026-11-05

Page 1 of 1