Threats Tagged 'ghsa-h5hr-vppv-v9cg'

1 threat

Threats Tagged 'ghsa-h5hr-vppv-v9cg'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.6%	CVE-2026-90472msgpack-java · Uncontrolled Recursion Medium6.9EPSS 0.6%2026-09-12CVE Database V5CVE-2026-90472 CVE-2026-90472 is a stack overflow vulnerability in msgpack-java versions up to 0.9.12. It occurs in the MessageUnpacker.unpackValue() method, which recursively deserializes arrays and maps without limiting nesting depth. Crafted payloads with deeply nested arrays can cause a StackOverflowError, leading to deserialization failures during request processing. EPSS 0.6%Vulnerability msgpack #ghsa-h5hr-vppv-v9cg	CVE Database V5	2026-09-12

Showing 1–1 of 1 result