Threats tagged 'brew-neovim-remote-cve-2026-114613'

The msgpack-python C extension has a memory leak vulnerability triggered when deserialization rejects a map key under strict_map_key validation. This causes unbounded memory growth and potential denial of service when processing attacker-controlled MessagePack data. Additionally, the streaming Unpacker API may suffer from a use-after-free due to stale parser-stack references. The issue affects version 1.2.2 and development commits, with a fix available in version 2.5.1_6.